Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.
MCPpedia last refreshed this data
ai.skilltotal/skilltotal is an MCP server that deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 58/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"skilltotal": {
"args": [
"mcp"
],
"command": "skilltotal"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
AI Component Security Platform — open-source CLI engine.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'some-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked some-mcp-server against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools / security
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
MCP server for using the GitLab API
Manage Supabase projects — databases, auth, storage, and edge functions
Chrome DevTools for coding agents
MCP Security Weekly
Get CVE alerts and security updates for ai.skilltotal/skilltotal and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.