How do I install skillguard?

Its own README gives this command: npx skillguard-cli scan ./examples/known-bad-skill. Run it where your MCP client can launch the server, and check the README for any settings it asks for.

Is skillguard official and is it maintained?

We found nothing naming it as a vendor’s official server. Its repository has 2 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-21.

What licence does skillguard use?

The repository declares the Apache-2.0 licence.

InfratoApp / Resources / MCP servers / skillguard

skillguard

skillguard is an MCP server, listed under version control. It reaches github. Its repository has 2 GitHub stars and is licensed under Apache-2.0; we last read it on 2026-10-23.

Scans third-party AI agent-skill files for security vulnerabilities using 10 rule packs that include cross-skill privilege chaining and prompt-injection detection. Available as a CLI, library, MCP server, and GitHub Action, all utilizing the same rule packs without requiring authentication or configuration.

Install

Read from skillguard’s own README, close to verbatim -- not written by us, and not guessed.

npx skillguard-cli scan ./examples/known-bad-skill

View in skillguard’s own README ↗

What it reaches, and what it needs

Reaches

github

Credential

○ none found

Maintenance

Stars

State

listed

Licence

Apache-2.0

From the repository

Security scanner for third-party AI agent-skill files (SKILL.md manifests, hooks, bundled scripts). CLI, library, MCP server, and GitHub Action, all reading the same 10 rule packs, including cross-skill privilege chaining and prompt-injection detection. Zero-auth, zero-config npx or pip scan.

View on GitHub ↗2026-10-23

skillguard compared with similar servers

skillguard compared with the closest alternatives, by services reached, credentials, stars, last update and licence
Server	Reaches	Needs	Stars	Last update	Licence
skillguard (this page)	github	None listed	2	2026-10-21	Apache-2.0
mcp-proxy	github(1 shared)	API_ACCESS_TOKEN, GITHUB_PERSONAL_ACCESS_TOKEN	2,805	2026-10-14	MIT
cve-mcp-server	abuseipdb, github, greynoise, nvd, shodan, urlscan, virustotal, vulncheck(1 shared)	ABUSEIPDB_KEY, GITHUB_TOKEN, GREYNOISE_API_KEY, NVD_API_KEY, SHODAN_KEY, URLSCAN_KEY, VIRUSTOTAL_KEY, VULNCHECK_TOKEN	1,633	2026-10-01	Apache-2.0
idea-reality-mcp	github(1 shared)	GITHUB_TOKEN	828	2026-09-18	MIT
MarkuprPlus	github(1 shared)	GITHUB_TOKEN	80	2026-10-18	MIT
mcp-bridge-api	github, slack(1 shared)	GITHUB_TOKEN, SLACK_BOT_TOKEN	69	2026-09-18	NOASSERTION

Ranked by services in common with skillguard, then by stars. Figures are from each repository when we last read it.

Common questions about skillguard

What does skillguard do?: Scans third-party AI agent-skill files for security vulnerabilities using 10 rule packs that include cross-skill privilege chaining and prompt-injection detection. Available as a CLI, library, MCP server, and GitHub Action, all utilizing the same rule packs without requiring authentication or configuration.
How do I install skillguard?: Its own README gives this command: npx skillguard-cli scan ./examples/known-bad-skill. Run it where your MCP client can launch the server, and check the README for any settings it asks for.
What does skillguard connect to, and what does it need?: It reaches github.
Is skillguard official and is it maintained?: We found nothing naming it as a vendor’s official server. Its repository has 2 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-21.
What licence does skillguard use?: The repository declares the Apache-2.0 licence.

More MCP servers for version control

mcp-proxy2,805 stars
cve-mcp-server1,633 stars
idea-reality-mcp828 stars
anythingmcp775 stars
RepoMapper217 stars
gitlab-mr-mcp94 stars

All version control entries →