Skillguard

Overview

Skillguard is a Model Context Protocol server that scans third-party AI agent-skill files for security vulnerabilities. It analyzes SKILL.md files, hooks, and scripts to help you identify potential risks before integrating external agent skills into your workflows. By exposing security scanning as MCP tools, Skillguard lets AI assistants inspect and validate skill files on your behalf.

The server runs locally on your machine via the skillguard-cli package, installed with uvx skillguard-cli. It communicates over stdio and requires no authentication or external credentials to function. Skillguard is published under the Apache-2.0 license at version v0.2.5, with source code available at RudrenduPaul/skillguard on GitHub.

Skillguard appears in the AI & Agents category and integrates with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain Skillguard, claim this listing to verify ownership and keep the information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "skillguard": {
      "command": "uvx",
      "args": [
        "skillguard-cli"
      ]
    }
  }
}