agent-guardlisted

Scan AI agent skills, plugins, and MCP servers for malicious code BEFORE installation — catches prompt injection, credential theft, data exfiltration, and backdoors. Skills and the static MCP source scan use NVIDIA SkillSpector (static patterns + taint tracking + YARA + live OSV.dev CVE lookup + LLM semantic analysis, which runs by default through the user's own claude / codex / gemini CLI login — no API key — or any hosted provider with a key); the optional live MCP runtime check uses cisco-ai-mcp-scanner with separate MCP_SCANNER_LLM_* settings and any LiteLLM-supported provider. Skills follow the open SKILL.md standard (agentskills.io) and MCP is an open protocol, so one scan covers every agent: repos are downloaded as commit-pinned ZIP snapshots (never git clone before a verdict), and the exact scanned commit is installed via the bundled universal installer into Claude Code, Claude Desktop, Codex, Antigravity/Gemini, Hermes, and OpenClaw at once — or a chosen subset via --tools. Scan once, install everywh
elliottwaves-20/agent-guard · ★ 2 · AI & Automation · score 75

Install: claude install-skill elliottwaves-20/agent-guard

# agent-guard — scan first, install after Skills and MCP servers are third-party code that runs with your user account's permissions. A malicious one can read SSH keys, `.env` files, and browser profiles, exfiltrate them, or hijack the agent itself through a poisoned SKILL.md. This skill makes a security scan the mandatory first step of every installation. Because skills follow the open [SKILL.md standard](https://agentskills.io) and MCP is an open protocol, the scan is agent-agnostic: one verdict covers Claude Code, Codex, Gemini/Antigravity, Hermes, OpenClaw, and any other compatible agent — and the installer deploys the same audited commit to all of them in one step. Professional scanners do the work, each where it is strongest: - **[NVIDIA SkillSpector](https://github.com/NVIDIA/SkillSpector)** — skill scans and the **static** MCP source scan. One tool for both, with 71 vulnerability patterns (prompt injection, data exfiltration, privilege escalation, MCP tool poisoning / least-privilege, supply chain with live OSV.dev CVE lookup, bundled hooks/settings), taint tracking, YARA, hidden/nested-archive inspection, and LLM analysis through the user's own coding-agent CLI login (no API key) or a hosted provider. Also covers `curl | bash` install scripts and cargo crate sources. - **[cisco-ai-mcp-scanner](https://github.com/cisco-ai-defense/mcp-scanner)** — the optional **live runtime** MCP check (`scan_mcp.py --sandbox` / `remote`). A static scan cannot se