Semgrep Guardian

Semgrep is an application security platform for static application security testing, open-source dependency analysis, secrets detection, and malware protection. Its analysis combines deterministic, rule-based scanning with AI reasoning about code context, naming, structure, and developer intent; findings can be surfaced and remediated through the CLI, CI/CD systems, IDEs, pull-request checks, APIs, webhooks, and supported AI-tool integrations. In the described workflow, Semgrep is used as a local verification gate alongside repository rules and pull-request review before a code change is considered complete.

AgentGuard is a web-based scanner for AI-agent Skills, including SKILL.md instructions. It combines deterministic pattern checks with AI-assisted analysis to identify capabilities and risks such as shell-command execution, file-system access, environment-variable and credential access, network requests, external downloads, suspicious URLs, obfuscated instructions, prompt-injection patterns, and destructive operations. It produces a trust report with security and quality scores, a risk rating, detected capabilities, findings, explanations, and recommendations. The scanner is free to use, requires no account, accepts up to 80,000 characters of Skill text, and is designed for analysis before installation.

geiger is a read-only command-line scanner from Atomburst that inventories AI agents, harnesses, MCP servers, plugins, skills, hooks, browser extensions, desktop AI applications, and related IDE configurations on a machine. It reads known configuration files and directories, identifies each finding's origin and evidence path, and labels capabilities such as code execution, secret storage, broad filesystem access, broad web access, and network access. Credential-shaped values are reported by key name, file, and secret type without exposing value contents; the scanner performs no telemetry and writes only an explicitly requested report file. It can emit terminal, HTML, or versioned JSON reports, scan specified project or home directories, enforce a strict exit status for findings that can execute code or hold secrets, and compare JSON snapshots to identify newly appeared, removed, or escalated findings. It runs through npx with Node.js 18 or newer, has no runtime dependencies or account requirement, and is licensed under MIT. The project notes that it reads configuration rather than runtime behavior, covers known locations, and does not determine whether a package is malicious.

Snyk Agent Scan is an AI security tool from Snyk that analyzes MCP server definitions, including configurations such as Cursor and VS Code mcp.json files, for tool poisoning, toxic flows, and prompt injection. The video also describes scanning MCP tool definitions and server code as part of combining agent-security checks with application-security analysis.

SkillSpector is an open-source security scanner for AI agent skills, developed by NVIDIA. It scans Git repositories, URLs, ZIP archives, directories, and individual skill files before installation, looking for prompt injection, data exfiltration, privilege escalation, supply-chain issues, dangerous code, MCP permission problems, tool poisoning, and other malicious patterns. Its two-stage pipeline combines static analysis—including regex, Python AST, taint tracking, YARA signatures, and OSV.dev dependency lookups—with optional LLM-based semantic evaluation. It produces terminal, JSON, Markdown, or SARIF reports containing findings, severity labels, a 0–100 risk score, and installation recommendations. Baselines can suppress accepted findings, and the CLI can be used in CI or install gates through exit codes and machine-readable output. SkillSpector can also run as an MCP server callable by compatible agents. It does not execute scanned skills or sandbox them; optional LLM analysis sends eligible file contents to the configured provider, while dependency checks query OSV.dev. The project is distributed under the Apache License 2.0 and is part of NVIDIA's Verified Skills pipeline.