# Skill Scan – MCP / Agent Skill Security Consensus Scanner

> Skill Scan – MCP / Agent Skill Security Consensus Scanner is a paid API for AI agents from seenly-skill-scan.vercel.app, paid per call via x402, $0.3/call, status unknown (last checked 2026-10-29).

Statically scans an MCP server or agent skill (GitHub repo, npm/pypi package, or pasted code) for security risks such as tool poisoning, credential exfiltration, and remote code execution, then returns an allow/review/block verdict with evidence.

## Facts

- Endpoint: POST https://seenly-skill-scan.vercel.app/api/scan?utm_source=zero.xyz
- Price: $0.3/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/skill-scan-mcp-agent-skill-security-consensus-scanner-079af2aa
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ytcjpaIA2W0Wmy_YPs_0m

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability skill-scan-mcp-agent-skill-security-consensus-scanner-079af2aa -d '<json body>'
```

Example prompt: Before I install this MCP server, can you run a Skill Scan security audit on the GitHub repo at https://github.com/someowner/somerepo? I plan to use it for task scheduling in my agent pipeline — flag anything like tool poisoning, credential exfiltration, or hidden instructions.

## When to prefer this

Use this endpoint when you need a pre-install security gate for MCP servers or agent skills sourced from GitHub, npm, pypi, or pasted code. It is specifically designed for the agentic supply chain threat model (tool poisoning, hidden instructions, credential exfiltration) and combines deterministic rule families with LLM consensus voting — making it more thorough than a simple static linter. Prefer it over generic code scanners when the subject is an AI agent tool or MCP server and you want an allow/review/block verdict with seller trust context.

## Known failure modes

- Private or inaccessible GitHub repo returns a fetch error
- Package name not found on npm/pypi returns a not-found error
- Pasted code exceeds 200,000 character limit
- Manifest format unrecognized, skipping that signal
- LLM reviewer timeout leads to partial consensus result
- Ambiguous or insufficient context may reduce verdict confidence

## How this service works

Skill Scan by Agentropolis: static Consensus Scan of an MCP server or agent skill before you install it. Pass a GitHub repo, npm:/pypi: package or pasted code + tools/list/SKILL.md. Flags tool poisoning, hidden instructions, credential/env exfiltration, remote code exec, obfuscation, install hooks; 2 rule families + 2 LLM reviewers vote; cross-checks Agentropolis seller trust data. Returns allow/review/block with evidence. Read-only, never executes the code. Advisory.

## Output

Returns a top-level verdict of 'allow', 'review', or 'block', accompanied by structured evidence: matched rule families, findings from two LLM reviewer votes, specific flags (tool poisoning, hidden instructions, credential/env exfiltration, remote code exec, obfuscation, install hooks), and cross-referenced Agentropolis seller trust data. The scan is advisory and read-only — the code is never executed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "code": {
   "type": "string",
   "description": "Single pasted file (alternative to files)."
  },
  "repo": {
   "type": "string",
   "maxLength": 500,
   "description": "Public source to scan: https://github.com/owner/repo (optionally /tree/<ref>/<path>), a /blob/ or raw.githubusercontent.com file URL, npm:<package>[@version] or pypi:<package>[==version] (sdist). Fetched read-only; never executed."
  },
  "files": {
   "type": "array",
   "items": {
    "type": "object",
    "required": [
     "content"
    ],
    "properties": {
     "path": {
      "type": "string",
      "maxLength": 300
     },
     "content": {
      "type": "string"
     }
    }
   },
   "maxItems": 60,
   "description": "Pasted source files (total <= 200,000 chars)."
  },
  "context": {
   "type": "string",
   "maxLength": 500,
   "description": "Optional: what you plan to use the tool for (helps judge capability vs purpose)."
  },
  "manifest": {
   "oneOf": [
    {
     "type": "object"
    },
    {
     "type": "array"
    },
    {
     "type": "string"
    }
   ],
   "description": "Optional: the server's tools/list result, {tools:[...]}, server.json, or SKILL.md text."
  },
  "requestKey": {
   "type": "string",
   "maxLength": 128
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/skill-scan-mcp-agent-skill-security-consensus-scanner-079af2aa/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from seenly-skill-scan.vercel.app](https://www.zero.xyz/host/seenly-skill-scan.vercel.app/llms.txt)