SkillTotal
MCP Server & Agent Skill Security Scanner
Free static scanner for MCP servers, agent skills and npm/PyPI packages. Finds prompt injection, tool poisoning and exfiltration with file:line evidence.
Supply-chain risk, dangerous capabilities, prompt-injection and exfiltration surfaces — derived only from the component itself. Paste a public git URL (GitHub/GitLab/Bitbucket/Hugging Face) or an npm:/pypi: package — an MCP server, agent skill/plugin, model repo, or package. Deterministic static analysis — no execution, no LLM: capabilities, dangerous APIs, prompt-injection and exfiltration surfaces.
Pricing & access
SkillTotal is open source - free to self-host, often with a paid cloud option. Check skilltotal.ai for current plans.
Frequently asked questions
What is SkillTotal?
SkillTotal is mCP Server & Agent Skill Security Scanner. Free static scanner for MCP servers, agent skills and npm/PyPI packages. Finds prompt injection, tool poisoning and exfiltration with file:line evidence.
Is SkillTotal free?
SkillTotal is open source - free to self-host, often with a paid cloud option.
What are the best SkillTotal alternatives?
People comparing SkillTotal also look at 0si.ai Disclosures, 1PixelStory, 1lookup, 2 Steps Ahead. See all options in the AI Voice & Audio category on SiftFox.
Work on SkillTotal?
Claim this profile for free - instant with a work email at skilltotal.ai.
What people say0
Sign in to join the conversation - takes one magic link.
No comments yet. First one sets the tone.