# @yoshine2007/agent-scan

> Security scanner for the AI agent ecosystem: MCP servers, Agent Skills, AGENTS.md / rule files, and agent tool code. Detects prompt injection, tool poisoning, data exfiltration and supply-chain risks. Zero dependencies.

Latest version **0.1.0** (published 2026-09-24) · MIT license · 0 weekly downloads

_The full health report (score, vulnerabilities, README, dependency tree, version history) is being computed; this document will grow once it lands._

## Install

```sh
npm install @yoshine2007/agent-scan
pnpm add @yoshine2007/agent-scan
yarn add @yoshine2007/agent-scan
bun add @yoshine2007/agent-scan
```

## Facts

| | |
|---|---|
| Version | 0.1.0 |
| Published | 2026-09-24 |
| First published | 2026-09-24 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | none |
| Dependencies | 0 |
| Author | agent-scan contributors |
| Maintainers | nexus2007 |
| Keywords | security, mcp, model-context-protocol, ai-agents, prompt-injection, agent-skills, scanner, sarif, code-scanning, linter, supply-chain |

## Links

- npm: https://www.npmjs.com/package/@yoshine2007/agent-scan
- Repository: https://github.com/xuange-hu/agent-scan
- Homepage: https://github.com/xuange-hu/agent-scan#readme
- npm.io page: https://npm.io/package/@yoshine2007/agent-scan

---
_Source: https://npm.io/package/@yoshine2007/agent-scan · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._