{"adoption": {"forks": 260, "observed_at": "2026-08-28T04:07:32.296758+00:00", "stars": 2958}, "canonical_url": "https://ross.abutalabs.com/products/agent-scan", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Security scanner for AI agents, MCP servers and agent skills.", "domain": ["security", "developer-tools", "large-language-models"], "enriched": true, "function": ["security", "vulnerability-scanning", "cli", "developer-tools"], "health_score": 100, "homepage": null, "language": "Python", "license": "Apache-2.0", "license_family": "permissive", "maturity": "experimental", "member_repos": ["snyk/agent-scan"], "name": "snyk/agent-scan", "platform": ["cli", "python", "cross-platform", "windows"], "pushed_at": "2026-08-26T14:54:39+00:00", "repo": "snyk/agent-scan", "stars": 2958, "tags": ["mcp", "agent-security", "prompt-injection", "sast", "ai-supply-chain", "snyk", "ai-agents", "macos", "linux"], "topics": ["agent", "ai", "mcp", "modelcontextprotocol", "security"], "urls": [], "use_cases": ["scan MCP servers for prompt injection vulnerabilities", "audit installed agent skills for malware payloads", "discover AI agent components on my machine", "check agent harnesses for sensitive data handling risks", "security scan my model context protocol setup", "vet third-party agent skills before installing them"], "what_it_is": "Snyk Agent Scan is a Python-based CLI security scanner that discovers installed AI agent components (agent harnesses, MCP servers, and agent skills) on a machine and scans them for threats like prompt injections, sensitive data handling, and malware hidden in natural language. It is developed by Snyk and distributed via uvx or standalone binaries.", "when_to_avoid": ["you need stable CLI output fields or issue codes for production automation, since output is experimental and may change", "you need continuous enterprise-scale agent security management rather than local scanning", "you need a non-Python or npm-distributed tool"], "when_to_choose": ["you install or develop MCP servers or agent skills and want to detect prompt injections and hidden malware", "you want a quick local CLI audit of all agent components on a machine", "you are evaluating AI agent supply-chain risk before adopting tools"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/agent-scan", "repo": "snyk/agent-scan", "role": "main", "score": 82}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:07:32.296758+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T07:32:12.054464+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "dc3b4300a95a59b041113b0eae457a77eff1a12d4c69532009d9ceddc78aa824", "fetched_at": "2026-08-28T04:07:32.296758+00:00", "kind": "readme", "missing": false, "url": "https://github.com/snyk/agent-scan"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 36, "rhythm": 86}, "computed_at": "2026-09-03T02:39:23.370411+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 513, "days_push": 7, "days_rel": 14, "gap_med": 3, "n_releases_24m": 66}, "score": 82, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}