toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden text, remote code, credential access, exfiltration, install hooks, over-broad MCP tools, typosquats and known-vulnerable dependencies; JSON report. The package is never run.

Payment Options