ISNAD Scan Web

Browser-based security scanner for AI agent skills, MCP configs, and tool definitions.

Live: https://scan.isnad.md (planned)

Features

• Paste code — paste any skill/config and get instant security analysis
• Upload files — drag & drop files or ZIP archives
• GitHub URL — scan any public GitHub repo/path
• JSON API — POST /api/scan with {"files": {"skill.py": "...code..."}}
• 69+ detection patterns — powered by isnad-scan

Run locally

pip install -r requirements.txt
python app.py
# → http://localhost:8080

Deploy

docker build -t isnad-scan-web .
docker run -p 8080:8080 isnad-scan-web

API Example

curl -X POST http://localhost:8080/api/scan \
  -H 'Content-Type: application/json' \
  -d '{"files": {"skill.py": "import subprocess\nsubprocess.run(input, shell=True)"}}'