Skill Audit MCP

Cross-referenced from the discovery channels that AI/security engineers actually read.

People who work with security, claude skills and devsecops and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-30 · ★ 6 · #169 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30

MIT · Python servers · how we verify → /methodology

01 · Install Skill Audit MCP

Claude Code

claude mcp add eltociear-skill-audit-mcp --transport http https://eltociear-skill-audit.hf.space/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "eltociear-skill-audit-mcp": {
      "url": "https://eltociear-skill-audit.hf.space/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://eltociear-skill-audit.hf.space/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-09-30

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem · remote - your agent's requests go to eltociear-skill-audit.hf.space

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

license MIT - declared in the repository

registry namespace io.github.eltociear is GitHub-verified and matches the repo owner

03 · What Skill Audit MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.0.1 · 2026-05-11

Adds Cline marketplace approval requirements and broadens distribution: · llms-install.md: explicit LLM-driven install instructions · SECURITY.md: vulnerability reporting policy · alpine-based scanner image…

v1.0.0 · 2026-04-30

Scan MCP servers, AI agent skills, and plugins for 68+ malicious patterns. · Credential exfiltration · Prompt injection · Code execution · Seed phrase harvesting · Download & execute · Identity impersonation · Add to…

04 · Who maintains Skill Audit MCP

skill-audit-mcp is maintained by eltociear. We track 4 MCP servers from eltociear - 4 actively maintained, 9 combined GitHub stars, oldest repo from Apr 2026.

05 · Facts

repository: github.com/eltociear/skill-audit-mcp
category: security - ranked #169 of 216 actively-maintained security servers as of 2026-09-30.
registry: io.github.eltociear/skill-audit-mcp (active, first published 2026-06-07 · 3 versions)
packages: oci:ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0

06 · Skill Audit MCP FAQ

What is Skill Audit MCP?

Cross-referenced from the discovery channels that AI/security engineers actually read.

Is Skill Audit MCP still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-30. We re-verify nightly.

How do I install Skill Audit MCP?

Run `claude mcp add eltociear-skill-audit-mcp --transport http https://eltociear-skill-audit.hf.space/mcp`. You can also paste the ready-made client config above.

Does Skill Audit MCP require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-09-30; you can connect without credentials.

07 · Alternatives to Skill Audit MCP

Alternatives to Skill Audit MCP

Maintained security servers if Skill Audit MCP isn't the fit.

Pairs well with

Servers that cover what Skill Audit MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Sanction · Haldir · Prodcheck · BoondManager MCP Server (fauguste) · Flagrix

More Python MCP servers · Memory Fabric · Semahash · Blender Optics Simulator · Winrdp MCP · Evc Team Relay MCP · see all