by awslabs · MCP Server · ★ 51
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 51 |
| Forks | 7 |
| Language | Python |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 69/100 |
| Open Issues | 18 |
| Last Updated | 2026-06-23 |
| Created | 2025-12-05 |
| Platforms | mcp, python |
| Est. Tokens | ~187k |
[![PyPI][pypi-badge]][pypi-url] [][pypi-url] [%22&replace=%241&label=OSCAL)][nist-oscal-url] [pypi-badge]: https://img.shields.io/pypi/v/mcp-server-for-oscal.svg [pypi-url]: https://pypi.org/project/mcp-server-for-oscal/ [nist-oscal-url]: https://pages.nist.gov/OSCAL/ [mcp-spec-url]: https://modelcontextprotocol.io/docs/getting-started/intro [issues-url]:...
These tools work well together with mcp-server-for-oscal for enhanced workflows:
Looking for a mcp-server-for-oscal alternative? If you're comparing mcp-server-for-oscal with other mcp server tools, these 3 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Amazon Bedrock Foundation models with Amazon Opensearch Serverless as a Vector DB
Reference architecture for agentic AI chatbots with Strands Agents and Amazon Bedrock AgentCore
Learn to build AI agents with Strands framework. Covers LLM integration via Amazon Bedrock/Anthropic, AWS serv
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: