Snyk Agent Scan
Discover and scan the agents, MCP servers and skills on your machine for prompt injection and vulnerabilities.
Sources and review
Checked against public documentation on . Suitability guidance is our editorial judgment; this is not a performance benchmark or an endorsement.
Auditing which MCP servers and skills are installed on a machine and whether any are risky.
You'd build automation on its output; Snyk describes the CLI output as experimental and subject to change.
About Snyk Agent Scan
Snyk Agent Scan finds agent components on a machine, including agent configurations, MCP servers and agent skills, and scans them for prompt injections and vulnerabilities. It can scan the whole machine, a specific MCP configuration file or a single skill, and runs with uvx or as a standalone binary.
Snyk Agent Scan is listed in this index written primarily in Python, with 3.2k stars on GitHub. Its latest recorded repository push was in October 2026; that is not an ASE editorial review date.
uvx snyk-agent-scan@latest