BackBond/agent-scan

Vet MCP and AI-agent tools before attachment. Local, deterministic static scanning with no tool execution, plus CI and redacted public records.

This repository also configures its own agents. See what agent-scan tells them →

1Stars on the repository
3Mods indexed here, across every type
7d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

agent-scan

01

BackBond/agent-scan

Skill Claude CodeCodex

Vet MCP tools/list and local AI-agent tool configuration before attachment. Use to check tool poisoning, forced invocation, confusable tool names, unconstrained shell or code inputs, risky fetch-plus-privilege combinations, delegation exposure, or elevated-permission requests with a pinned offline static gate.

not rated 1 changed 1mo ago A 61 tokens original MIT