Snyk Agent Scan
Discover and scan the agents, MCP servers and skills on your machine for prompt injection and vulnerabilities.
Sources and review
Checked against public documentation on . Suitability guidance is our editorial judgment; this is not a performance benchmark or an endorsement.
Auditing which MCP servers and skills are installed on a machine and whether any are risky.
You'd build automation on its output; Snyk describes the CLI output as experimental and subject to change.
About Snyk Agent Scan
Snyk Agent Scan finds agent components on a machine, including agent configurations, MCP servers and agent skills, and scans them for prompt injections and vulnerabilities. It can scan the whole machine, a specific MCP configuration file or a single skill, and runs with uvx or as a standalone binary.
Snyk Agent Scan is an open-source project written primarily in Python, with 3.1k stars on GitHub. It was last updated in September 2026.
uvx snyk-agent-scan@latestSnyk Agent Scan vs. the alternatives
All 163 alternatives →| Record | Stars | Pricing | ||
|---|---|---|---|---|
| Snyk Agent Scanthis listing | 3.1k | Python | Apache-2.0 | Open source |
| MCP Reference Servers | 91k | TypeScript | MIT AND Apache-2.0 | Open source |
| context7 | 62k | TypeScript | MIT | Open source |
| chrome-devtools-mcp | 53k | TypeScript | Apache-2.0 | Open source |
| Playwright MCP | 37k | TypeScript | Apache-2.0 | Open source |
| github-mcp-server | 33k | Go | MIT | Open source |
