by nolabs-ai · MCP Server · ★ 4.8k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
brew install nonoTaken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 4,798 |
| Forks | 325 |
| Language | Rust |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 68/100 |
| Open Issues | 120 |
| Last Updated | 2026-10-31 |
| Created | 2026-01-31 |
| Platforms | mcp, rust |
| Est. Tokens | ~4844k |
Built by the team that brought you Sigstore The standard for secure software attestation, used by PyPI, npm, brew, and Maven Central <img src="https://img.shields.io/badge/SecureAction-agent--sign-2088FF?style=for-the-badge&logo=github-actions&logoColor=white
Looking for a nono alternative? If you're comparing nono with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, maliciou
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions
Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory,
A security scanner for your LLM agentic workflows
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: