skilltotal

pezhik/skilltotal

★ 0 stars Python AI/LLM Updated today

Scan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capabilities. Local, deterministic, evidence-anchored. Free & OSS.

View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "skilltotal": {
      "command": "uvx",
      "args": [
        "skilltotal"
      ]
    }
  }
}

Or install with pip: pip install skilltotal

README Excerpt

**AI Component Security Platform — open-source CLI engine.** SkillTotal statically analyzes AI-related components — agent skills/plugins, MCP servers, npm / Python packages, repositories, and **AI-generated projects you upload as an archive or file** — to surface supply-chain risks, dangerous capabilities, prompt-injection surfaces, and data-exfiltration

Topics

ai-agentsai-securitydevsecopsllm-securitymcpmodel-context-protocolprompt-injectionpythonsarifsecurity-toolsstatic-analysissupply-chain-security

skilltotal

Quick Install

README Excerpt

Topics

Related AI/LLM Servers