Scan repositories for AI supply-chain and agent-security risks with Medusa Security
Use Medusa Security before trusting a repository, dependency, or AI-agent codebase when an agent needs a focused scan for repo poisoning, prompt-injection, MCP, and AI supply-chain findings.
Prerequisites
Python 3.10+, pip, local repository path or remote Git URL
Installation
Choose whichever fits your setup:
- Copy this skill folder into your local skills directory.
- Clone the repo and symlink or copy the skill into your agent workspace.
- Add the repo as a git submodule if you manage shared skills centrally.
- Install it through your internal provisioning or packaging workflow.
- Download the folder directly from GitHub and place it in your skills collection.
Install command or upstream instructions:
Install with pip install medusa-security, then run medusa scan against a local repository or use medusa scan --git <repo> to assess a remote repository before trusting it.