Prism Scanner
Scan skills, plugins, and MCP servers you are about to install and get an A–F security grade before trusting them in your agent stack.
Overview
Prism Scanner is a MCP server for the ship phase that security-scans AI agent skills, plugins, and MCP servers and returns A–F grades.
What is this MCP server?
- Security scanner focused on AI agent skills, plugins, and MCP servers
- A–F grading for quick triage of untrusted packages
- PyPI package prism-scanner with stdio MCP transport
- Complements manual README review before adding marketplace entries
- Version 0.1.1 on Model Context Protocol registry schema 2025-12-11
- Server version 0.1.1
- PyPI identifier prism-scanner
- Targets three artifact types: skills, plugins, MCP servers
Community signal: 11 GitHub stars.
What problem does it solve?
You are one npm or PyPI install away from giving an unreviewed skill or MCP server access to your codebase and environment variables.
Who is it for?
Solo builders curating skills.sh or MCP registry entries who want a fast security screen before adding servers to Claude Code or Cursor.
Skip if: Enterprises needing formal pentests, compliance attestations, or continuous runtime threat detection on production workloads.
What do I get? / Deliverables
You get letter-grade security assessment on candidate skills and MCP servers so you can reject or quarantine risky extensions before enabling them.
- A–F security grade for evaluated skills or MCP servers
- Structured scan output usable in install/no-install decisions
- Repeatable pre-install checks for agent extension stacks
Recommended MCP Servers
Journey fit
Risk from third-party agent extensions appears whenever you add tooling—validate prototypes, build integrations, and ship to users—so the canonical shelf is ship/security where hard gates belong. Pre-ship and pre-install security review is the natural home for graded scans of MCP servers and agent skills before they run with your repo and secrets.
How it compares
Dedicated security grader for agent extensions, not a general code linter or Skillselion catalog browse facet.
Common Questions / FAQ
Who is Prism Scanner for?
Builders and maintainers who install third-party MCP servers and agent skills and want an A–F security grade before trusting them.
When should I use Prism Scanner?
Run it before adding a new skill or MCP server from GitHub or a registry, and again when you upgrade versions of agent tooling.
How do I add Prism Scanner to my agent?
Install the PyPI package prism-scanner, configure stdio MCP in your client, and invoke scan tools against the skill or MCP package you are evaluating.