Discover the toolingbehind modern intelligence
The operating system for AI infrastructure discovery. Search a live map of MCP servers, AI agents, LLM tools, automation systems, and developer infrastructure.
decoy-scan
Security scanner for MCP server configurations. Like npm audit, but for your AI agent tool servers. Finds risky tools, input validation gaps, transport vulnerabilities, and over-permissioned capability chains. Open source, zero dependencies.
1stars
0forks
JavaScript
ai-agentclimcpowaspprompt-injectionsarifscannersecuritysupply-chaintool-poisoning
Quality signals
ActiveNo testsNo CIThin docsNo licenseNew
InstallMCPRun via npx (Node)
Universal installANY TOOL
$ npx skillcity@latest decoy-run/decoy-scanAuto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.
Requires Node.js 18+ (ships with npx).
Or install manually
npx -y decoy-scan
MCP Configuration
Add this to your claude_desktop_config.json
{
"mcpServers": {
"decoy-scan": {
"command": "npx",
"args": [
"-y",
"decoy-scan"
]
}
}
}Loading README…
Ask a simulated agent to run this skill. It loads the real SKILL.md and reasons over your task with NVIDIA.
decoy-scan — sandboxAI sandbox
Pick a quick prompt below or type your own — watch the agent execute this skill step by step.
guest@skillcity:~$Try a prompt