Snyk Agent Scan

CLI that discovers agent components on a machine and scans MCP servers and skills for prompt injections.

Observability tool by Snyk (Invariant Labs)

IndexedApache-2.0★ 3,169

Install

Pick your client. Read the repository before you give any tool access to your data.

pip install snyk-agent-scan

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Snyk Agent Scan discovers agent components on a machine, including harnesses, MCP servers and skills, and scans them for threats such as prompt injections, sensitive data handling and malware payloads. It is installed through uvx or as a standalone binary, and it needs a Snyk account and API token. The README warns that scans can start stdio MCP servers and make outbound requests to remote MCP URLs.

Use cases: security-scanning

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Fact sheet

Category: Red teaming · mcp
Protocols: mcpraw.githubusercontent.com

Facts read from the vendor's own pages by claude-haiku-5-5 on Oct 24, 2026; a fact is shown only with the page it came from.

Signals

Stars: 3,169
Forks: 293
Open issues: 12
Last commit: Oct 22, 2026 (6 days ago)
Last release: Oct 20, 2026 (8 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Packages: pypi snyk-agent-scan
License: Apache-2.0
Repository: github.com/snyk/agent-scan
Website: github.com/snyk/agent-scan
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: README github-graphql

Cite this page

Snyk Agent Scan. Agent Mart. https://agentmart.dev/observability/snyk-agent-scan (last updated 2026-10-24)