bots.st/skilltriage
SkillTriage
Static analysis of agent and MCP configs
2401 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 4
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://skilltriage.moorai.dev/mcp
What it can do
| Tool | What it says it does |
|---|---|
lookup_verdict | Look up the verdict the public catalogue has published for an MCP server package on npm or PyPI. Returns found:false when the catalogue has no published verdict for that name; that is not a clean result. Nothing is downloaded or scanned. This request names the package to the server; to match… |
scan_mcp_config | Check a pasted MCP client config (.mcp.json, claude_desktop_config.json, mcp.json, Codex config.toml). Reports each npm or PyPI launch by its position and how its version is pinned (exact, @latest, a tag or range, none), flags releases on the known-compromised list, and runs static analysis over… |
scan_package | Download one published package and run static analysis on its code with MoorAI's open-source engine. npm and PyPI packages also get ten MCP pre-install checks on their registry metadata, a reputation score and a known-compromised release check. Static analysis only: the package is never installed… |
scan_skill | Scan one agent skill or instruction file (SKILL.md, AGENTS.md, a tool.json, any text file) with MoorAI's open-source engine. Static analysis only; nothing is run. The text is written to a temporary directory, scanned and deleted; only its hash, the verdict and content-free findings are kept… |
In its maker's words
Scan AI agent skills, MCP server packages and MCP configs before you install them. Static analysis.
- Website
- skilltriage.moorai.dev/api
- Publisher
- moorai.dev
- Listed from
- the official MCP Registry as
dev.moorai/skilltriage - Version
- 0.6.1, updated 31 Oct 2026
- Kinds of work
- Security and trust, Code and developer tools
The domain it lives on
- moorai.dev
- registered 15 Sep 2026 (2 months ago), at HOSTINGER operations, UAB, its home page is a working site
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 2401 ms | |
| Answered | 2193 ms | |
| Answered | 1528 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.