macOS
Homebrewverifiziert · 100%
brew install snyk-agent-scanlocal Homebrew formula metadata
brew
snyk-agent-scan mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für snyk-agent-scan in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Überblick
Paketzusammenfassung
Constrain, log and scan your MCP connections for security vulnerabilities
Projektlinks
Befehle und Aliase
- snyk-agent-scan
Verlauf
Projektgeschichte und Nutzung
Snyk Agent Scan is Snyk's CLI for discovering and scanning local AI agent components, MCP servers, skills, and related configuration for security risks. It reflects the new package-manager problem of executable agent ecosystems: installed tools are no longer just binaries, they are prompts, skills, MCP configs, and commands that may run during inspection.
Projektgeschichte
The public GitHub repository was created in 2025. Its README describes Agent Scan as a tool for inventorying installed agent components and scanning for prompt injections, sensitive data handling, malware payloads hidden in natural language, tool poisoning, toxic flows, and vulnerabilities in agent skills.
The README notes that CLI output is experimental and that Agent Scan 0.4 was published with a technical report on emerging threats in the agent skill ecosystem, indicating a young tool aimed at a fast-changing area.
Adoptionsgeschichte
Official usage examples install and run the tool with `uvx snyk-agent-scan@latest`, while the input records a Homebrew formula. The supported-agent matrix includes mainstream developer agents such as Claude, Cursor, Windsurf, Gemini CLI, VS Code, Codex, Amazon Q, and others.
Wie es verwendet wird
Users can run a full machine scan, scan a specific MCP configuration file, scan one skill file, or scan a directory of skills. The README warns that scanning MCP configurations may execute commands defined in those configs, so the CLI includes interactive consent and a deliberately named flag for trusted non-interactive runs.
Warum Paket-Nerds sich dafür interessieren
Package nerds care because Agent Scan treats local agent configuration as supply chain surface. It scans the places modern developer tools install behavior, including project, user, system, extension, and plugin scopes, making it relevant to anyone packaging or auditing AI-enabled command-line environments.
Zeitleiste
- 2025: Public GitHub repository created.
- 2025: README documents scanning for MCP servers, agent tools, and skills.
- 2026: Repository metadata shows active maintenance.
Related projects
- Related ecosystems include MCP servers, Codex skills, Claude skills, Cursor/Windsurf/Gemini agent configurations, and Snyk's broader developer security tooling.
Quellen
- https://github.com/snyk/agent-scan
- https://github.com/snyk/agent-scan#readme
- source_facts.package-manager
Sicherheitslage
Noch keine Protected-Tool-Abdeckung gefunden
Für snyk-agent-scan wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Installiert mit 6 Laufzeitabhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
snyk-agent-scan | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-25
Manager-Version0.5.15
Manager aktualisiert2026-07-17
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt
https://github.com/snyk/agent-scan
- InfoNo cached GitHub release or tag data was available.https://github.com/snyk/agent-scannone Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:snyk-agent-scan |
|---|---|
| Version | 0.5.15 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/snyk-agent-scan |
| Homepage | https://github.com/snyk/agent-scan |
| Repository | https://github.com/snyk/agent-scan |
| Upstream-Dokumentation | https://github.com/snyk/agent-scan#readme |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://files.pythonhosted.org/packages/a3/51/27ef1f809249107da45f6f3f4f190af7da51293257d3c84b2da1261edc9f/snyk_agent_scan-0.5.15.tar.gz |
| Zuletzt aktualisiert | 2026-07-17T17:13:21Z |
| Pulse | updated |
| Abhängigkeiten | certifi, cryptography, libyaml, pydantic, python@3.14, rpds-py |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | snyk-agent-scan |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment