The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Agent Scan
Security scanner for AI agents, MCP servers and agent skills.
Install
$
uvx snyk-agent-scan@0.5.17Claude Code
claude mcp add agent-scan -- uvx snyk-agent-scan@0.5.17Cursor / Claude Desktop (mcp.json)
{
"mcpServers": {
"agent-scan": {
"command": "uvx",
"args": [
"snyk-agent-scan@0.5.17"
]
}
}
}Install command taken from the project's README or registry entry. Always review code before running it.
README excerpt
Read full README on GitHub →Snyk Agent Scan
Discover and scan agent components on your machine for prompt injections and vulnerabilities (including agents, MCP servers, skills).
Note: We don't publish an npm package for Agent Scan. Install it via
uvxor as a standalone binary.
Note: CLI output is experimental and subject to change
Agent Scan v0.5.x (planned for deprecation)
The raw output of this CLI — including issue codes, field names, severity labels, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or issue codes.
Agent Scan v0.6 and later
The raw output of this CLI — including risk indicator names, scores, field names, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or risk names.
If you are an enterprise customer using Snyk to manage agent security risk at scale, the CLI output may not reflect what is sent to and shown in the Evo platform. The underlying integration, discovery, and risk assessment that powers enterprise deployments is stable and supported — any changes will be communicated in line with standard Snyk product practices. Contact your account team for deployment guidance.
NEW Read our technical report on the emerging threats of the agent skill eco-system published together with Agent Scan 0.4, which adds support for scanning agent skills.
Agent Scan v0.5.x output
[!WARNING] Agent Scan v0.5.x uses issue-code output. This CLI line is planned for deprecation.
Agent Scan v0.6 and later output
Agent Scan helps you discover all your installed agent components (harnesses, MCP servers, and skills) and scans them for common threats like prompt injections, sensitive data handling, or malware payloads hidden in natural language. Ignore analysis on skills by using --no-skills.
Security Warning
Similar plugs
Reverse engineer anything with agents, from app behavior down to native binaries.
Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype…
User-friendly AI Interface (Supports Ollama, OpenAI API, ...)
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io
Open-source Python library for AI browser agents, plus Browser Use Cloud: stealth browsers and a hosted agent API.