by Pantheon-Security · MCP Server · ★ 1.0k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
pip install medusa-securityTaken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 1,013 |
| Forks | 153 |
| Language | Python |
| Category | MCP Server |
| License | AGPL-3.0 |
| Quality Score | 68/100 |
| Open Issues | 3 |
| Last Updated | 2026-08-10 |
| Created | 2025-11-15 |
| Platforms | claude-code, mcp, python |
| Est. Tokens | ~22k |
🐍 MEDUSA - AI Security Scanner AI-first security scanner with 40,000+ detection patterns for AI/ML, agents, and LLM applications. 🤖 Works out of the box - no tool installation required. 🚨 200 CVEs: Log4Shell, Spring4Shell, XZ Utils, LangChain RCE, MCP-Remote RCE, React2Shell 🔥 — Scan any repo for AI supply chain attacks (repo poisoning, prompt injection, MCP tool poisoning) 🔐 — Find leaked...
Looking for a medusa alternative? If you're comparing medusa with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mappe
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do
A security scanner for your LLM agentic workflows
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models,
Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP
Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: