Is io.github.duriantaco/skylos safe to use?

io.github.duriantaco/skylos has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.duriantaco/skylos?

io.github.duriantaco/skylos supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.duriantaco/skylos?

io.github.duriantaco/skylos is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.duriantaco/skylos actively maintained?

io.github.duriantaco/skylos is actively maintained — last commit was 3 days ago. It has 462 GitHub stars.

io.github.duriantaco/skylos

skylos

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

462 GitHub PyPI

No known CVEs

No license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Developer Tools Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-duriantaco-skylos": {
      "args": [
        "skylos"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-duriantaco-skylos)](https://mcppedia.org/s/io-github-duriantaco-skylos)

Read me

What io.github.duriantaco/skylos does

📖 Website · Documentation · Blog · GitHub Action · VS Code Extension · MCP Server

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'skylos' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked skylos against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.duriantaco/skylos safe to use?: io.github.duriantaco/skylos has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.duriantaco/skylos?: io.github.duriantaco/skylos supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.duriantaco/skylos?: io.github.duriantaco/skylos is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.duriantaco/skylos actively maintained?: io.github.duriantaco/skylos is actively maintained — last commit was 3 days ago. It has 462 GitHub stars.

Similar servers

Others in developer-tools / security

View all →

Filesystem MCP Server98

Read, write, and manage files on the local filesystem

87.9k 7

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Supabase MCP Server97

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.duriantaco/skylos and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-duriantaco-skylos": {
      "args": [
        "skylos"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-duriantaco-skylos)](https://mcppedia.org/s/io-github-duriantaco-skylos)

Read me

What io.github.duriantaco/skylos does

📖 Website · Documentation · Blog · GitHub Action · VS Code Extension · MCP Server

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'skylos' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Skylos

Open-source, local-first checks for dead code, security issues, secrets, quality regressions, and AI-code mistakes before merge.

English | Deutsch | 简体中文 | Translations

What Is Skylos?

Skylos is an open-source static analysis CLI for Python, TypeScript, JavaScript, Java, Go, Kotlin, PHP, Rust, Dart, C#, Shell, and deployment config. It runs locally by default and can also be used as a CI/CD PR gate.

Use Skylos when you want one command to check a repo or pull request for:

dead code and unused files
security flaws and dangerous data flows
secrets and dependency CVEs
CI/CD and edge-device deployment misconfigurations
quality regressions such as complexity, duplicate branches, and deep nesting
common AI-generated code mistakes, including missing guards, fake helpers, invented package APIs, and impossible dependency versions
LLM app risks such as unsafe tool use and missing output validation

Start In 60 Seconds

pip install skylos
skylos .

The default scan focuses on dead code. Add security, secrets, quality, dependency, and AI-defect checks with -a:

skylos . -a

Run only evidence-backed AI defect checks with:

skylos . --ai-defects

Verify a changed file or range before an agent hands it to review:

skylos verify . --file src/app.py --range 40:75 --project-context

Create a local AI hallucination contract for repo-specific generated-code truth. skylos verify auto-discovers .skylos/ai-contract.yml:

skylos contract init
skylos contract inspect
skylos verify .

Create a project config with thresholds, ignores, template hooks, and vibe dictionary extensions:

skylos init

Create a starter local rule pack:

skylos rules init
skylos rules validate .skylos/rules/local.yml
skylos rules list --json
skylos rules list cross --json
skylos rules list --packs --json
skylos cache stats

Generate a GitHub Actions PR gate:

skylos cicd init
git add .github/workflows/skylos.yml
git commit -m "Add Skylos CI gate"
git push

Need more commands? Read the CLI Reference.

Common Workflows

Goal	Command	What You Get	More Detail
First dead-code scan	`skylos .`	Finds unused functions, classes, imports, files, and framework entrypoint mistakes	Dead code docs
Deterministic cleanup preview	`skylos clean . --dry-run --types import,function --confidence 80`	Shows safe import/function removals before writing; add `--apply` to edit files	[Dead code docs](ht

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked skylos against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.duriantaco/skylos safe to use?: io.github.duriantaco/skylos has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.duriantaco/skylos?: io.github.duriantaco/skylos supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.duriantaco/skylos?: io.github.duriantaco/skylos is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.duriantaco/skylos actively maintained?: io.github.duriantaco/skylos is actively maintained — last commit was 3 days ago. It has 462 GitHub stars.