BackBond

BackBond/agent-scan

Skill Claude CodeCodex

Vet MCP tools/list and local AI-agent tool configuration before attachment. Use to check tool poisoning, forced invocation, confusable tool names, unconstrained shell or code inputs, risky fetch-plus-privilege combinations, delegation exposure, or elevated-permission requests with a pinned offline static gate.

BackBond/agent-scan

MCP server Claude CodeCodexCursor +2

Vet MCP tool manifests before attachment; returns block, review, or no blocking finding. Runs locally from the @backbond/agent-scan npm package.