Prism Scanner
Prism Scanner is an open-source security scanner for AI agent skills, plugins, and MCP servers. It performs static code analysis to detect malicious behavior before installation and scans for system residue after uninstallation, providing full lifecycle coverage. It is designed for developers and security professionals who want code-level transparency and protection across multiple platforms.
✨ Key features
- Static analysis with taint tracking for code behavior
- Detects prompt injection and psychological manipulation patterns
- Scans for metadata issues like hardcoded credentials and typo-squatting
- Residue scanner for persistence mechanisms and leftover credentials
- Safe cleanup with plan, apply, and rollback workflow
- Supports multiple output formats: JSON, HTML, SARIF
🎯 Use cases
- Scan a skill directory before installing it into an agent
- Scan a GitHub repository for malicious code in CI/CD
- Check system for residue after uninstalling an agent tool
- Generate a cleanup plan for leftover agent artifacts
- Integrate security scanning into GitHub Actions with SARIF upload
📦 Installation
🧰 Requirements: Requires Python 3.12+ (for pip install) or Docker; no API keys needed. For MCP server, requires Claude Desktop or compatible client.
pip install prism-scanner
Homebrew (macOS)
brew tap prismlab/tools
brew install prism-scanner
npx (no install needed)
npx prism-scanner scan https://github.com/user/skill-repo
Docker
docker build -t prism-scanner .
Or use the published image:
docker run ghcr.io/prismlab/prism-scanner scan <target>
🚀 Usage
prism scan ./my-skill/prism scan https://github.com/user/skill-repoprism clean --scanprism clean --planprism clean --apply❓ FAQ
What does Prism Scanner detect?
It detects malicious behavior in code (S1-S14), metadata issues like hardcoded credentials and prompt injection (M1-M6, P1-P9), and system residue left behind after uninstallation (R1-R10).
How does Prism Scanner work?
It performs static analysis using AST, pattern matching, and manifest analysis, with taint tracking to follow data flow. It never executes the scanned code.
Can I use Prism Scanner in CI/CD?
Yes, you can use the GitHub Action or run prism scan with --fail-on to fail the pipeline on findings. It supports SARIF output for GitHub Code Scanning.
Does Prism Scanner require an internet connection?
No, it can run offline with the --offline flag to skip external lookups.
📊 Repository
🤖 Overview, features, install steps and FAQ were generated from the project's README on Sep 4, 2026. Always check the original source before running commands.