Когда использовать: Someone sent you a cool-looking skill link. Before clone, you want to know if it's safe.
Поток
-
Point at the target repo URL
Use repo-forensics. Scan https://github.com/<author>/<skill> with the skill_threats, secrets, dataflow, and lifecycle scanners. Report findings.✓ Скопировано
→ Per-scanner report with severity flags
-
Read correlated findings
Any correlations across scanners — e.g. a secret-leak path plus a lifecycle hook?✓ Скопировано
→ Correlation summary
Итог: A go / no-go decision grounded in scanner output, not vibes.
Подводные камни
- Trusting a green scan as full proof of safety — Scanners are strong floor, not a ceiling — still read SKILL.md
Когда использовать: Before adding a new MCP server to an agent with real permissions.
Поток
-
Run MCP-focused scanners
Scan this MCP server repo with mcp_security, skill_threats, integrity, and dast.✓ Скопировано
→ Findings focused on tool descriptions and install scripts
-
Check git history for identity spoofing
Run git_forensics on the same repo — any spoofed commits?✓ Скопировано
→ Author / signing analysis
Итог: An MCP security dossier before you wire it into your agent.
Когда использовать: Install finished with unexpected behavior; you want to know if something landed.
Поток
-
Run post_incident + entropy scans
Run post_incident scanner on ~/.npm and the current project. Also entropy scan the installed packages.✓ Скопировано
→ Flags for suspicious cached artifacts or encoded payloads
Итог: Evidence of whether to rotate secrets and rebuild.
Подводные камни
- Running scans from the potentially-compromised shell — Run from a fresh shell or another machine when in doubt