dev.moorai/skilltriage · v0.6.1 · developer-tools
SkillTriage is healthy: it completed an MCP handshake in 797 ms and exposes 4 tools.
Scan AI agent skills, MCP server packages and MCP configs before you install them. Static analysis.
Endpoint: https://skilltriage.moorai.dev/mcp (streamable-http)
No repository listed · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 4 |
| Latency | 797 ms |
| Last checked (UTC) | 2026-10-31T19:30:27.671Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-31T19:30:27.671Z | Healthy | 797 |
scan_package | Download one published package and run static analysis on its code with MoorAI's open-source engine. npm and PyPI packages also get ten MCP pre-install checks on their registry metadata, a reputation score and a known-compromised release check. Static analysis only: the package is never installed an |
scan_mcp_config | Check a pasted MCP client config (.mcp.json, claude_desktop_config.json, mcp.json, Codex config.toml). Reports each npm or PyPI launch by its position and how its version is pinned (exact, @latest, a tag or range, none), flags releases on the known-compromised list, and runs static analysis over the |
scan_skill | Scan one agent skill or instruction file (SKILL.md, AGENTS.md, a tool.json, any text file) with MoorAI's open-source engine. Static analysis only; nothing is run. The text is written to a temporary directory, scanned and deleted; only its hash, the verdict and content-free findings are kept. Returns |
lookup_verdict | Look up the verdict the public catalogue has published for an MCP server package on npm or PyPI. Returns found:false when the catalogue has no published verdict for that name; that is not a clean result. Nothing is downloaded or scanned. This request names the package to the server; to match without |