ClawKit Logo
ClawKitReliability Toolkit
Back to Registry
Official Verified

aiclude-vulns-scan

Search security vulnerability scan results for MCP Servers and AI Agent Skills from the AICLUDE scan database.

skill-install — Terminal

Install via CLI (Recommended)

clawhub install openclaw/skills/skills/mastergear4824/aiclude-vulns-scan
Or

/security-scan - AICLUDE Vulnerability Scanner

Search the AICLUDE security scan database for vulnerability reports on MCP Servers and AI Agent Skills. If no report exists, the target is registered and scanned automatically.

Usage

/security-scan --name <package-name> [--type mcp-server|skill]

Parameters

  • --name: Package name to search (npm package, GitHub repo, etc.)
  • --type: Target type (mcp-server | skill) - auto-detected if omitted

Examples

/security-scan --name @anthropic/mcp-server-fetch
/security-scan --name my-awesome-skill --type skill

How It Works

  1. Sends the package name to the AICLUDE scan API
  2. If a scan report exists, returns it immediately
  3. If not, registers the target for scanning
  4. Waits for the scan to complete and returns the results
  5. Results are also viewable at https://vs.aiclude.com

Only the package name and type are sent. No source code or credentials are transmitted.

Output

  • Risk Level (CRITICAL / HIGH / MEDIUM / LOW / INFO)
  • Vulnerability List with locations and descriptions
  • Risk Assessment and remediation recommendations

Links

License

Apache 2.0 - AICLUDE Inc.

Metadata

Stars1401
Views1
Updated2026-02-24
View Author Profile
AI Skill Finder

Not sure this is the right skill?

Describe what you want to build — we'll match you to the best skill from 16,000+ options.

Find the right skill
Add to Configuration

Paste this into your clawhub.json to enable this plugin.

{
  "plugins": {
    "official-mastergear4824-aiclude-vulns-scan": {
      "enabled": true,
      "auto_update": true
    }
  }
}

Tags

#security#vulnerability#scanner#mcp#ai-agent
Safety NoteClawKit audits metadata but not runtime behavior. Use with caution.

Related Skills

doctorbot-ci-validator

Stop failing in production. Validate your GitHub Actions, GitLab CI & Keep workflows offline with surgical precision. Born from Keep bounty research, perfected for agents.

bamontejano 4473

social-vault

社交平台账号凭证管理器。提供登录态获取、AES-256-GCM 加密存储、定时健康监测和自动续期。Use when managing social media account credentials, importing cookies, checking login status, or automating session refresh. Also covers platform adapter creation and browser fingerprint management.

2019-02-18 4473

arc-shield

Output sanitization for agent responses - prevents accidental secret leaks

arc-claw-bot 4473

undertow

Skill discovery engine for AI coding agents. Recommends and installs the right skill when you need it — code review, test generation, debugging, commit messages, PR preparation, security scanning, dependency audits, Docker setup, CI/CD pipelines, API documentation, refactoring, performance optimization, bundle analysis, git recovery, README generation, license compliance, migration guides, dead code removal, and secret detection. One install gives your agent access to a curated library of 20+ developer workflow skills. Use when the user asks for help with any development workflow, code quality, DevOps, security, testing, documentation, or project setup task.

8co 4473

AURA Security Scanner

Scan AI agent skills for malware, credential theft, prompt injection, and dangerous permissions before installing them

aurasecurity-creator 4473