# snyk-agent-scan を Homebrew でインストール snyk-agent-scan のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:snyk-agent-scan ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install snyk-agent-scan ``` 証拠: local Homebrew formula metadata ## パッケージ情報 - **パッケージキー:** brew:snyk-agent-scan - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 0.5.15 - **ソース概要:** Constrain, log and scan your MCP connections for security vulnerabilities - **ホームページ:** - **リポジトリ:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **最終更新:** 2026-08-04T12:53:27Z - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - snyk-agent-scan (cli) - snyk-agent-scan (エイリアス) ## 依存関係 - certifi - cryptography - libyaml - pydantic - python@3.14 - rpds-py ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 0.5.15 - マネージャ更新日: 2026-08-04 - ローカルデータ: OK - 上流リポジトリ: https://github.com/snyk/agent-scan - 情報: No cached GitHub release or tag data was available. ## プロジェクトの歴史と使われ方 Snyk Agent Scan is Snyk's CLI for discovering and scanning local AI agent components, MCP servers, skills, and related configuration for security risks. It reflects the new package-manager problem of executable agent ecosystems: installed tools are no longer just binaries, they are prompts, skills, MCP configs, and commands that may run during inspection. ### プロジェクトの歴史 The public GitHub repository was created in 2025. Its README describes Agent Scan as a tool for inventorying installed agent components and scanning for prompt injections, sensitive data handling, malware payloads hidden in natural language, tool poisoning, toxic flows, and vulnerabilities in agent skills. The README notes that CLI output is experimental and that Agent Scan 0.4 was published with a technical report on emerging threats in the agent skill ecosystem, indicating a young tool aimed at a fast-changing area. ### 採用の歴史 Official usage examples install and run the tool with `uvx snyk-agent-scan@latest`, while the input records a Homebrew formula. The supported-agent matrix includes mainstream developer agents such as Claude, Cursor, Windsurf, Gemini CLI, VS Code, Codex, Amazon Q, and others. ### 使われ方 Users can run a full machine scan, scan a specific MCP configuration file, scan one skill file, or scan a directory of skills. The README warns that scanning MCP configurations may execute commands defined in those configs, so the CLI includes interactive consent and a deliberately named flag for trusted non-interactive runs. ### パッケージ好きにとっての重要性 Package nerds care because Agent Scan treats local agent configuration as supply chain surface. It scans the places modern developer tools install behavior, including project, user, system, extension, and plugin scopes, making it relevant to anyone packaging or auditing AI-enabled command-line environments. ### タイムライン - 2025: Public GitHub repository created. - 2025: README documents scanning for MCP servers, agent tools, and skills. - 2026: Repository metadata shows active maintenance. ### Related projects - Related ecosystems include MCP servers, Codex skills, Claude skills, Cursor/Windsurf/Gemini agent configurations, and Snyk's broader developer security tooling. ### ソース - - - source_facts.package-manager ## セキュリティノート snyk-agent-scan に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、パッケージメタデータはここに公開されています。 ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** snyk-agent-scan - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 関連リンク - [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family. - [MCP tool packages](https://pkg.so/ja/mcp-tools/) - Mentions MCP or Model Context Protocol. - [AI and agent packages](https://pkg.so/ja/ai-agent-tools/) - Matched AI model, agent, coding-agent, orchestration, or MCP metadata. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [python@3.14](https://pkg.so/ja/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [yutu](https://pkg.so/ja/brew/yutu/) - Shares pkgdb curated category or tags: ai, ai-agent, cli, mcp. - [wassette](https://pkg.so/ja/brew/wassette/) - Shares pkgdb curated category or tags: ai, cli, mcp, security. - [github-mcp-server](https://pkg.so/ja/brew/github-mcp-server/) - Shares pkgdb curated category or tags: ai, cli, mcp. - [mcp-toolbox](https://pkg.so/ja/brew/mcp-toolbox/) - Shares pkgdb curated category or tags: ai, cli, mcp. - [n8n-mcp](https://pkg.so/ja/brew/n8n-mcp/) - Shares pkgdb curated category or tags: ai, cli, mcp. - [playwright-mcp](https://pkg.so/ja/brew/playwright-mcp/) - Shares pkgdb curated category or tags: ai, cli, mcp. - [chrome-devtools-mcp](https://pkg.so/ja/brew/chrome-devtools-mcp/) - Shares pkgdb curated category or tags: ai, cli, mcp. - [mcp-grafana](https://pkg.so/ja/brew/mcp-grafana/) - Shares pkgdb curated category or tags: ai, cli, mcp. - [mcp-atlassian](https://pkg.so/ja/brew/mcp-atlassian/) - Both packages touch the same language runtime or ecosystem. Shared terms: ai, certifi, cli, cryptography, libyaml. - [mcp-google-sheets](https://pkg.so/ja/brew/mcp-google-sheets/) - Both packages touch the same language runtime or ecosystem. Shared terms: ai, certifi, cli, cryptography, mcp. - [mcp-proxy](https://pkg.so/ja/brew/mcp-proxy/) - Both packages touch the same language runtime or ecosystem. Shared terms: ai, certifi, cli, cryptography, mcp. ## Combined YAML source View the package source record on GitHub. [combined/snyk-agent-scan.yml](https://github.com/mxcl/pkgdb/blob/main/combined/snyk-agent-scan.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph