by asamassekou10 · MCP Server · ★ 830
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
npx ship-safe audit .
npx ship-safe audit . --deepTaken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 830 |
| Forks | 111 |
| Language | JavaScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 73/100 |
| Open Issues | 8 |
| Last Updated | 2026-09-05 |
| Created | 2026-02-02 |
| Platforms | cli, mcp, node |
| Est. Tokens | ~20k |
AI-powered application security platform for developers. shipsafecli.com 18 security agents. 80+ attack classes. One command. Ship Safe v6.4.0 is an AI-powered security platform that runs 18 specialized agents in parallel against yo
Looking for a ship-safe alternative? If you're comparing ship-safe with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
A security scanner for your LLM agentic workflows
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mappe
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models,
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: