MCP & Agent Security Auditor — Live Static Analyzer

Paste your mcp.json, Claude Code hooks, or SKILL.md content below to detect hardcoded secrets, dangerous shell execution pipes, unpinned npx packages, and prompt injection patterns. Runs 100% client-side in your browser — zero data leaves your machine.