Home › Security › SkillTotal

SkillTotal

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

Python

★ 16 stars Last pushed 2026-11-08 License: Apache-2.0

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

uvx skilltotal

Or add to your MCP client config:

{
  "mcpServers": {
    "skilltotal": {
      "command": "uvx",
      "args": [
        "skilltotal"
      ]
    }
  }
}

This server takes extra arguments — see its repository.

Scan code for security vulnerabilities using Semgrep.

IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.

Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention…

JADX decompiler plugin providing live, LLM-assisted reverse engineering.

Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious…

Data from the Official MCP Registry