Skill Audit MCP Server

by eltocieario.github.eltociear/skill-audit-mcpv1.2.0

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

6Dockerstdioremoteofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active10d ago

Install Skill Audit MCP server

claude mcp add skill-audit -- docker run -i --rm ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0

{
  "mcpServers": {
    "skill-audit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "skill-audit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "skill-audit": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "skill-audit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Remote endpoints

streamable-httphttps://eltociear-skill-audit.hf.space/mcp

Freshness

Active — last maintenance signal 10d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-09-30 · 10d ago · GitHub
Latest release
2026-05-11 · 5mo ago · GitHub · v1.0.1
Package published
no data · npm/PyPI
Registry entry updated
2026-09-30 · 10d ago · official registry · v1.2.0

FAQ

›How do I install the Skill Audit MCP server in Claude Code?

Run: claude mcp add skill-audit -- docker run -i --rm ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Skill Audit require an API key?

No required environment variables are declared in its published metadata.

›Can I use Skill Audit as a remote (hosted) MCP server?

Yes — it offers both a hosted endpoint and a local stdio package.

›Is Skill Audit in the official MCP registry?

Yes, as io.github.eltociear/skill-audit-mcp.