io.github.eltociear/skill-audit-mcp

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "skill-audit-mcp": {
      "url": "https://eltociear-skill-audit.hf.space/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (11)

• paid_catalogue

  List the paid API routes this same server offers, with prices and which ones need no input. The MCP tools here are free and general-purpose; the paid routes are specialised (on-chain token safety, live DEX prices, wallet intel, supply-chain scans). Payment is x402 over USDC on Base — no account or API key. Takes no arguments.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• air_quality

  Current air quality for a place: PM2.5, PM10, ozone, NO2, SO2, CO and dust, plus the US and European AQI and the US AQI band ('Good', 'Unhealthy'). Takes a place name — no coordinates needed. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • location (required) — string — Place name, e.g. 'Tokyo'

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• geocode

  Resolve a place name to coordinates, country, admin region, timezone, elevation and population. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • name (required) — string — Place name to resolve
  • count — integer — 1-20 candidates (default 5)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• earthquakes

  Recent earthquakes from the USGS feed — worldwide, or within a radius of a named place. Returns magnitude, depth, tsunami flag and felt reports. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • days — integer — 1-30 days back (default 1)
  • limit — integer — 1-100 events (default 20)
  • location — string — Centre on a place name
  • radius_km — number — Radius around location (default 500)
  • min_magnitude — number — Lower bound (default 4.5)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• public_holidays

  Public holidays for a country and year, with local names and a past/upcoming flag. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • country (required) — string — ISO 2-letter country code, e.g. JP
  • year — integer — Calendar year (defaults to current)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• country_indicator

  World Bank time series for a country: gdp, gdp_per_capita, population, inflation, unemployment, life_expectancy, co2_per_capita or internet_users. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • country (required) — string — ISO 2- or 3-letter country code
  • years — integer — 1-60 most recent years (default 5)
  • indicator — string — Alias above, or a World Bank code

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• elevation

  Ground elevation in metres for a place name. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • location (required) — string — Place name

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• web_search

  Search the live web and return ranked title/url/snippet results, through an automatic multi-engine failover chain. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • query (required) — string — Search query
  • max_results — integer — 1-25 (default 10)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• read_url

  Fetch a URL and return its main content as clean Markdown, boilerplate stripped. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)

  Parameters:

  • url (required) — string — Page to fetch

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• audit_skill_text

  Scan text — an agent skill, MCP server source, or plugin — for malicious behaviour before loading it. 17 attack patterns / 65 regex signatures across 4 severity levels — credential exfiltration, download-and-execute, prompt injection, command execution, seed-phrase harvesting and more.

  Parameters:

  • content (required) — string — File or snippet to scan

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• audit_skill_url

  Fetch a URL and scan what it serves for malicious behaviour. 17 attack patterns / 65 regex signatures across 4 severity levels — credential exfiltration, download-and-execute, prompt injection, command execution, seed-phrase harvesting and more.

  Parameters:

  • url (required) — string — Raw file URL to fetch and scan

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.