用于AI代理的安全扫描仪、MCP服务器和代理技能。
概览
发现并扫描你机器上的代理组件，寻找提示注入和漏洞（包括代理、MCP服务器、技能）。 该CLI的原始输出——包括问题代码、字段名称、严重性标签和响应结构——仍处于实验阶段，发布间可能会无预警地更改。我们不建议构建依赖特定CLI输出字段或问题代码的生产工作流。如果您是使用Snyk大规模管理代理安全风险的企业客户，CLI输出可能与Evo平台发送和显示的内容不一致。支撑企业部署的底层集成、发现和风险评估是稳定且支持的——任何变更将按照Snyk标准产品实践进行沟通。请联系您的账户团队获取部署指导。 阅读我们与Agent Scan 0.4一同发布的关于代理技能生态系统新兴威胁的技术报告，该版本增加了对扫描代理技能的支持。
概述（AI 翻译）
Snyk 特工扫描
发现并扫描机器上的麻醉剂组件，以便及时注入 以及漏洞（包括代理、MCP服务器、技能）。
注： 我们不发布 Agent Scan 的 npm 包。通过
uvx安装，或作为独立二进制文件安装。
注：CLI输出为实验性且可能发生变化
Agent Scan v0.5.x（计划弃用）
该CLI的原始输出——包括问题代码、字段名称、严重性标签和响应结构——仍处于实验阶段，发布间可能会无预警更改。我们不建议构建依赖特定CLI输出字段或问题代码的生产工作流。
Agent Scan v0.6及以后版本
该CLI的原始输出——包括风险指标名称、评分、字段名称和响应结构——仍处于实验阶段，发布间可能会有无预警的变动。我们不建议构建依赖特定CLI输出字段或风险名称的生产工作流。
如果你是企业客户，使用 Snyk 大规模管理代理安全风险，CLI 输出可能与 Evo 平台中发送和显示的内容不一致。
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
Snyk Agent Scan
Discover and scan agent components on your machine for prompt injections and vulnerabilities (including agents, MCP servers, skills).
Note: We don’t publish an npm package for Agent Scan. Install it via
uvxor as a standalone binary.
Note: CLI output is experimental and subject to change
Agent Scan v0.5.x (planned for deprecation)
The raw output of this CLI — including issue codes, field names, severity labels, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or issue codes.
Agent Scan v0.6 and later
The raw output of this CLI — including risk indicator names, scores, field names, and response structure — is experimental and may change without notice between releases. We do not recommend building production workflows that depend on specific CLI output fields or risk names.
If you are an enterprise customer using Snyk to manage agent security risk at scale, the CLI output may not reflect what is sent to and shown in the Evo platform. The underlying integration, discovery, and risk assessment that powers enterprise deployments is stable and supported — any changes will be communicated in line with standard Snyk product practices. Contact your account team for deployment guidance.
NEW Read our technical report on the emerging threats of the agent skill eco-system published together with Agent Scan 0.4, which adds support for scanning agent skills.
Agent Scan v0.5.x output
[!WARNING] Agent Scan v0.5.x uses issue-code output. This CLI line is planned for deprecation.
Agent Scan v0.6 and later output
安装
新手？先看 mcpskill.org 教程 →配置
{
"mcpServers": {
"Demo MCP Server": {
"type": "stdio",
"command": "uv",
"args": ["run", "mcp", "run", "demoserver/server.py"],
},
},
}