by afshinm · MCP Server · ★ 698
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
Flagged: reads sensitive env vars. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 698 |
| Forks | 40 |
| Language | Rust |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 70/100 |
| Open Issues | 9 |
| Last Updated | 2026-05-17 |
| Created | 2026-03-17 |
| Platforms | cli, codex, mcp, rust |
| Est. Tokens | ~168k |
🫙 Zerobox Sandbox any command with file, network, and credential controls. Lightweight, cross-platform process sandboxing powered by OpenAI Codex's sandbox runtime. Deny by default: Writes, network, and environment variables are blocked unless you
Looking for a zerobox alternative? If you're comparing zerobox with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply cha
A security scanner for your LLM agentic workflows
Think before doing, prove before saving. Vestige is the local-first cognitive operating system and determinist
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do
📚 Sync skills, agents, MCP, plugins to all AI CLI tools with one command and simplify team sharing.
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: