dvcrn /security-scan - AICLUDE Vulnerability Scanner
Search the AICLUDE security scan database for vulnerability reports on MCP Servers and AI Agent Skills. If no report exists, the target is registered and scanned automatically.
Usage
/security-scan --name <package-name> [--type mcp-server|skill]
Parameters
--name: Package name to search (npm package, GitHub repo, etc.)--type: Target type (mcp-server|skill) - auto-detected if omitted
Examples
/security-scan --name @anthropic/mcp-server-fetch
/security-scan --name my-awesome-skill --type skill
How It Works
- Sends the package name to the AICLUDE scan API
- If a scan report exists, returns it immediately
- If not, registers the target for scanning
- Waits for the scan to complete and returns the results
- Results are also viewable at https://vs.aiclude.com
Only the package name and type are sent. No source code or credentials are transmitted.
Output
- Risk Level (CRITICAL / HIGH / MEDIUM / LOW / INFO)
- Vulnerability List with locations and descriptions
- Risk Assessment and remediation recommendations
Links
- Web Dashboard: https://vs.aiclude.com
- npm:
@aiclude/security-skill - MCP Server:
@aiclude/security-mcp
License
Apache 2.0 - AICLUDE Inc.