AgentScan Reviews

AgentScan Description

AgentScan is a no-cost, deterministic security scanner specifically designed for evaluating AI agent skills. It meticulously inspects a skill directory, which includes platforms like Claude Code, Codex, OpenCode, and MCP servers, for various vulnerabilities such as prompt injection, hidden secrets, network activity, malware signatures, and obfuscation techniques prior to installation. Each identified issue is accompanied by specific file:line references and an associated confidence score. The tool operates without executing the skill or uploading any data, functioning entirely offline. Being free and open-source under the MIT license, it also offers the Trust Pack feature, which facilitates the addition of 90 pre-audited skills with a single command. This ensures users can enhance their security measures efficiently.