SkillAudit
https://skillaudit.vercel.app/mcp ↗
Description
Security scanner for AI agent skills and MCP servers. Detects credential theft, data exfiltration, prompt injection, obfuscated code, and 80+ threat patterns. Free API + CLI (npx skillaudit). Premium deep scans via x402 micropayments.
What our measurements say
SkillAudit is a remote MCP server published at skillaudit.vercel.app. It has been probed 6 times since 9/10/2026. It answered in 6 of them (100.0%), a near-uninterrupted record. Median response time is 984 ms, a delay an agent will notice. It offers a narrow, focused set of 4 tools. On the protocol side it still runs 2025-11-25 and has not moved to the newer spec.
Agent readability score
Can an LLM agent pick the right tool here — names, descriptions and parameter clarity are assessed.
Agent readability score
Strengths
- Tool names clearly communicate their primary intent
- Logical functional separation between scanning, gating, and reputation
Weaknesses
- Complete absence of parameter data types (string, integer, etc.)
- Lack of guidance on when to use specific tools versus others
- Ambiguity regarding mandatory vs. optional parameters
- No documentation on error states or expected value ranges
scan_url— Missing parameter type for 'url'scan_github— Unclear if 'branch' is a required or optional parametergate_check— The 'threshold' parameter lacks a defined type or valid rangereputation_check— No specification for 'domain' format requirements
Verdict
Event narrative
Risk: medium
- 2026-09-10T21:16:35.016Z — era changed from 'auth-gated' to 'legacy' · transition to legacy system detected
- 2026-09-11T09:28:19.138Z — complianceScore improved from null to 100 · system achieved full compliance
Advice
Schema compliance
tools/list structure, inputSchema validity, and a functional smoke test — the components of the 0-100 score.
- tools/list schema valid
- inputSchema is valid JSON Schema
- Smoke test not run this round
- Cold-start: cold 146ms → warm 169ms (penalty 0ms)
Availability history
Event log
Derived by comparing consecutive probes — changes in era, protocol version, build and reachability.
- Server build: — → 1.1.0
- Supported versions: — → 2025-03-26
- Era changed: Auth-gated → Legacy
- Added to watch — era: Auth-gated
Get your badge
Add this badge to your README — it updates automatically as measurements change.
[](https://mcpmetrics.io/servers/megamind-0x-skillaudit)<a href="https://mcpmetrics.io/servers/megamind-0x-skillaudit"><img src="https://mcpmetrics.io/badge/megamind-0x/skillaudit/era.svg" alt="mcpmetrics"></a>You are seeing the last 7 days. Sign up for the full history. Which check failed and why is in the dashboard.
Sign up free to see