audr

harshmaur/audr

★ 0 stars Go 🔒 Security Updated 5d ago

Static-analysis scanner for AI-agent configurations (MCP servers, skills, agent permissions). Offline-by-default. SARIF/HTML/JSON output.

View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "audr": {
      "command": "go",
      "args": [
        "run",
        "github.com/harshmaur/audr@latest"
      ]
    }
  }
}

README Excerpt

**Developer-machine security scanner for AI-agent/tooling risk.** Scan MCP servers, Claude Code skills, Cursor / Codex / Windsurf configs, agent instruction docs, GitHub Actions workflows, package manifests, and local secret exposure for developer-machine risk. Offline by default. Single static Go binary, no `npm`/`pip`. Emits HTML, SARIF, and JSON reports.

audr

Quick Install

README Excerpt

Related Security Servers