Official MCP server for mcpskills.io — pre-install trust scores, safety scans, auto-gate. @mcpskillsio/server (io.mcpskills/server). Not affiliated with mcpskills.dev.
@mcpskillsio/server
以下摘录自该仓库的 README(片段) · 在 GitHub 读完整 README →
Use the MCPSkills pre-install trust layer from inside Claude Code, Cursor, or any MCP client.
13 standard signals (15 in Skills Mode) across 4 dimensions with safety scanning for prompt injection, credential theft, and supply chain attacks. Check install risk before an MCP server or AI skill reaches your agent.
Install
Claude Code
Cursor
Add to your .cursor/mcp.json:
Claude Desktop
Add to claude_desktop_config.json:
Tools
check_trust_score
Score any GitHub repo, npm package, or registry URL. Returns trust tier, composite score, and 4 dimension scores.
scan_safety
Focused safety scan for AI skills. Checks for prompt injection, shell execution, network exfiltration, credential theft, and obfuscated payloads.
list_packages
Browse curated, pre-scored skill packages organized by use case.
get_badge
Generate an SVG trust badge URL for your README.
watch_repo
Start monitoring a repo for trust score changes (requires API key).
check_watched
Re-scan all watched repos for score or tier changes (requires API key).
batch_check
Score up to 5 repos in a single call (Developer Pro or Team).
auto_gate
Get a boolean go/no-go decision with reasoning.
build_stack
Recommend a vetted, pre-scored stack from MCP Skills' curated packages.
Full Reports
Free tier returns trust tier + dimension scores (same as mcpskills.io free scans, 10/day).
For full reports (13 standard / 15 Skills Mode signals + safety findings) inside your IDE, set your API key:
Get your API key at mcpskills.io/api. Developer Pro is $19/mo or $149/yr. Team is $99/mo for org/security workflows.
How It Works
The server calls the mcpskills.io trust scoring API, which:
1. Fetches repo data from GitHub API and OpenSSF Scorecard
2. Scores 13 standard signals across 4 dimensions (Alive, Legit, Solid, Usable)
3. Detects AI skills/MCP servers and activates Skills Mode (+2 bonus signals — 15 total)
4. Runs 5 safety scans based on ClawHavoc and ToxicSkills attack patterns