Snyk Agent Scan is a Python-based security scanner that inventories and analyzes agent components (agents, MCP servers, and skills) for threats such as prompt injections and malware. It provides CLI commands to scan local configurations and supports interactive and non-interactive modes.
Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).
What it is
Snyk Agent Scan is a security scanning tool to discover and scan agent components on a machine, including agents, MCP servers, and agent skills, for prompt injections, data handling issues, and malware payloads.
How it works
Agent Scan searches local agent configuration files to find agents, skills, and MCP servers. For MCPs, it connects to servers and retrieves tool descriptions. It can operate in interactive mode with user consent before starting stdio MCP servers, or in non-interactive mode using a flag to bypass prompts. It shares detected tool names and descriptions with Snyk for verification, and does not store usage data.
Getting started
Quick start options
- Run the Python package with uvx
- Download a standalone binary from GitHub Releases (SBOM, checksums, and source archives are provided)
Pre-run prerequisites
- Sign up at Snyk and obtain an API token, then export it as an environment variable:
export SNYK_TOKEN=your-api-token-here
Run with uvx
uvx snyk-agent-scan@latest
Examples for scanning specific items:
# scan a specific mcp configuration
uvx snyk-agent-scan@latest ~/.vscode/mcp.json
# scan a single agent skill
uvx snyk-agent-scan@latest ~/path/to/my/SKILL.md
# scan all claude skills
uvx snyk-agent-scan@latest ~/.claude/skills
Run with a standalone binary
Download the binary for your OS/arch from the latest release page. The page also provides SBOM and checksum files.
Recent releases
Latest releases include v0.5.16 Agent Scan (2026-08-03) and v0.5.16-snapshot-6e2d290-1473 (2026-08-03), followed by v0.5.15 (2026-07-16) and v0.5.15-snapshot-7260e53-1459 (2026-07-16), and v0.5.14 (2026-07-15).
Traction
2863 stars, 255 forks, 4 open issues.
Caveats
The README notes that CLI output is experimental and may change between releases. It warns that scanning MCP configurations will execute commands defined in those configurations, and recommends running scans in sandboxed environments and using the dangerous flag only in trusted contexts. License info is Apache-2.0.