Bawbel Scanner
by bawbelcommunityv1.1.1
7
4
Bawbel Scanner scans agentic AI artifacts such as SKILL.md files, MCP server manifests, system prompts, and plugins for security vulnerabilities mapped to the AVE standard. It also scans MCP server-cards and scores MCP server manifest conformance against the MCP spec.
From the registry: Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
Install & configure
No canonical install info was extracted for this server. Check the repository README directly.
Tools (6)
scan
Scans files or directories for security vulnerabilities.
scan-server-card
Fetches and scans an MCP server-card (.well-known/mcp.json) and its tool descriptions.
scan-conformance
Scores an MCP server manifest against the MCP specification.
report
Generates a full remediation report for a scanned file.
pin
Hashes skill files and stores them in .bawbel-pins.json for drift detection.
check-pins
Checks pinned hashes for changes or rug-pull drift.
Environment variables
ANTHROPIC_API_KEYrequiredAPI key for the LLM semantic analysis engine.OPENAI_API_KEYrequiredAPI key for the LLM semantic analysis engine.BAWBEL_SANDBOX_ENABLEDrequiredEnables the behavioral sandbox stage.Packages
bawbel-scanner
pypiv1.1.1transport: stdio
Details
- Language
- Python
- License
- NOASSERTION
- Released
- May 6, 2026
- Last commit
- Jun 11, 2026
- Registry name
- io.github.bawbel/bawbel-scanner