NestDaddy

SkillTriage

dev.moorai/skilltriage · v0.6.1

Scan AI agent skills, MCP server packages and MCP configs before you install them. Static analysis.

Connect Remote server

Terminal
claude mcp add --transport http skilltriage https://skilltriage.moorai.dev/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "skilltriage": {
      "url": "https://skilltriage.moorai.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "skilltriage": {
      "type": "http",
      "url": "https://skilltriage.moorai.dev/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://skilltriage.moorai.dev/mcp

Tools 4 found in our last check

  • scan_package

    Download one published package and run static analysis on its code with MoorAI's open-source engine. npm and PyPI packages also get ten MCP pre-install checks on their registry metadata, a reputation score and a known-compromised release check. Static analysis only: the package…

  • scan_mcp_config

    Check a pasted MCP client config (.mcp.json, claude_desktop_config.json, mcp.json, Codex config.toml). Reports each npm or PyPI launch by its position and how its version is pinned (exact, @latest, a tag or range, none), flags releases on the known-compromised list, and runs sta…

  • scan_skill

    Scan one agent skill or instruction file (SKILL.md, AGENTS.md, a tool.json, any text file) with MoorAI's open-source engine. Static analysis only; nothing is run. The text is written to a temporary directory, scanned and deleted; only its hash, the verdict and content-free findi…

  • lookup_verdict

    Look up the verdict the public catalogue has published for an MCP server package on npm or PyPI. Returns found:false when the catalogue has no published verdict for that name; that is not a clean result. Nothing is downloaded or scanned. This request names the package to the ser…

Details

Endpointhttps://skilltriage.moorai.dev/mcp (Streamable HTTP)
First published31 Oct 2026
Last updated31 Oct 2026
Registry namedev.moorai/skilltriage

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.