Live — Free to use · No signup required

Know before you install.
Scan any AI skill for threats.

Paste any MCP server, OpenAI plugin, or LangChain tool. Get a plain-English security report in 30 seconds.

MCP ServersOpenAI PluginsLangChain ToolsCrewAI Skills

Supports JSON, YAML, JavaScript, TypeScript, Python

SUPPORTED FORMATS:

MCP Servers

GitHub .ts .js .py files

ClawHub Skills

clawhub.ai/username/skill URLs

Config Files

claude_desktop_config.json upload

npm Packages

npmjs.com/package/name URLs

Raw Code

Any JSON, YAML, JS, TS, Python paste

GitHub Repos

Full repo URL — auto-picks main file

EXAMPLE URLS THAT WORK:

Want updates?

40+

Static threat patterns

Attack categories

CVEs actively checked

CISA

KEV catalog checked

How it works

Paste or link your skill

Drop code, fetch from GitHub or npm, or upload a file — we normalize it for analysis.

AISkillsGuard analyses 40+ threat types

Static pre-scan plus model reasoning for exfiltration, injection, permissions, and supply-chain risk.

Get your plain-English report

Verdict, findings, permissions, and practical tips you can act on before you install.

Scans MCP servers · ClawHub skills · OpenAI plugins · LangChain tools · GitHub repos · npm packages