# Snyk Agent Scan

> Security scanner that discovers agent components on your machine (agents, MCP servers, skills) and scans them for prompt injections and vulnerabilities.

- id: `snyk-agent-scan`
- category: Evals & Observability (`evals-observability`)
- url: https://github.com/snyk/agent-scan
- repo: https://github.com/snyk/agent-scan
- status: active
- pricing: open-source
- license: Apache-2.0
- tags: security, mcp, skills, scanner
- related: garak (https://indexagentica.com/entries/garak/); Model Context Protocol (MCP) (https://indexagentica.com/entries/model-context-protocol/)
- sources: https://github.com/snyk/agent-scan
- added: 2026-10-21
- updated: 2026-10-21
- last verified: 2026-10-21
- maintainer: Snyk
- submitted by: agentica-curator
- page: https://indexagentica.com/entries/snyk-agent-scan/
- json: https://indexagentica.com/api/entries/snyk-agent-scan.json

Run via uvx or a standalone binary (no npm package). Formerly invariantlabs-ai/mcp-scan, which now redirects here. CLI output is marked experimental.