Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/jacksenechal/scan-mcp/setup-mcpnpx skills add jacksenechal/scan-mcp --skill setup-mcpgit clone --depth 1 https://github.com/jacksenechal/scan-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jacksenechal/scan-mcp/setup-mcp)<a href="https://agentmods.dev/skills/jacksenechal/scan-mcp/setup-mcp"><img src="https://agentmods.dev/badge/skills/jacksenechal/scan-mcp/setup-mcp.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00075 | $0.00756 |
| Opus 5 | $0.00037 | $0.00378 |
| Sonnet 5 | $0.00015 | $0.00151 |
| Haiku 4.5 | $0.00007 | $0.00076 |
Grade A, and why
setup-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
scan-mcp MCP Server Setup
Configure the scan-mcp MCP server in Claude Code's global configuration to enable scanner control.
Setup Workflow
Step 1: Gather User Preferences
Ask user for:
- INBOX_DIR location (default:
~/Documents/scanned_documents/inbox) - Installation method: npx (recommended) or local
Step 2: Run Preflight Checks
npx -y scan-mcp --preflight-only
Expected on success: All checks passed!
If preflight fails: Parse output to identify missing dependencies, then guide user through installation (see PLATFORMS.md).
Common missing items:
- SANE utilities (
scanimage,scanadf) - TIFF tools (
tiffcpor ImageMagickconvert)
Step 3: Locate Claude Code MCP Configuration
Claude Code config location:
~/.config/claude/config.json(Linux/macOS)- Create if doesn't exist
Step 4: Add or Update Configuration
Configuration structure (npx - recommended):
{
"mcpServers": {
"scan": {
"command": "npx",
"args": ["-y", "scan-mcp"],
"env": {
"INBOX_DIR": "~/Documents/scanned_documents/inbox"
}
}
}
}
Important:
- If config.json doesn't exist: Create it with scan-mcp server entry
- If config.json exists but no mcpServers: Add mcpServers section
- If mcpServers exists: Add or update "scan" entry
- Preserve existing MCP server configurations
For local installation (advanced): See ADVANCED.md.
Step 5: Verify Configuration
- Inform user that Claude Code needs restart to pick up new configuration
- Suggest testing:
claude mcpor asking "scan this document" - If issues occur, suggest running
/doctor
Quick Example
User: "Setup scan-mcp"
Actions:
- Ask: "Where would you like scanned documents stored? (Default: ~/Documents/scanned_documents/inbox)"
- Run:
npx -y scan-mcp --preflight-only - If preflight passes:
- Locate/create
~/.config/claude/config.json - Add scan-mcp server configuration
- Confirm: "scan-mcp configured. Please restart Claude Code. Test with 'scan this document'."
- Locate/create
- If preflight fails:
- Identify missing dependencies
- Provide installation commands (see PLATFORMS.md)
- Re-run preflight after user installs
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 91 lines · 75 tokens per session scan A ff3b3667d226
setup-mcp is a skill published in the GitHub repository jacksenechal/scan-mcp (6 stars, last pushed 1mo ago), licensed MIT. It adds 75 tokens to every session and 756 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
edgeone skill scanner
Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: 这个 skill 安全吗, skill 安全扫描…
analyzing-linux-elf-malware
Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through static analysis, dynamic tracing, and reverse engineering of x8664 and ARM samples. Use when investigating Linux malware, triaging a suspicious ELF binary…
analyzing-linux-kernel-rootkits
Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (checksyscall, lsmod, hiddenmodules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, and tampered system structures.
direct-injection-detection
Detect direct prompt injection or instruction override via user message (no external content). Focuses on system/role override attempts.
create-skill
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
logging-and-error-reporting
How and when to log (log:: levels, safe macros) and report errors to Sentry (reporterror!) in the Warp codebase. Use when adding or reviewing any logging or error reporting — picking a log level, deciding log vs. reporterror!, keeping sensitive data out of logs, or surfacing an error to Sentry.