SkillTriage
Scan AI agent skills, MCP server packages and MCP configs before you install them. Static analysis.
What it does
SkillTriage is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to one capability: code review. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 2h ago (live check)Hosted endpoint
https://skilltriage.moorai.dev/mcpstreamable-http
In Claude Code: claude mcp add --transport http skilltriage https://skilltriage.moorai.dev/mcp
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"skilltriage": {
"url": "https://skilltriage.moorai.dev/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 2h agoONLINE SkillTriage answered an MCP connection on 31 Oct 2026 and introduced itself as SkillTriage 0.6.1 (MCP protocol 2025-06-18).
4 tools offered to AI assistants
scan_package· Download one published package and run static analysis on its code with MoorAI's open-source engine. npm and PyPI packages also get ten MCP pre-install checks on their registry metadata, a reputation score and a known-compromised release chscan_mcp_config· Check a pasted MCP client config (.mcp.json, claude_desktop_config.json, mcp.json, Codex config.toml). Reports each npm or PyPI launch by its position and how its version is pinned (exact, @latest, a tag or range, none), flags releases on tscan_skill· Scan one agent skill or instruction file (SKILL.md, AGENTS.md, a tool.json, any text file) with MoorAI's open-source engine. Static analysis only; nothing is run. The text is written to a temporary directory, scanned and deleted; only its hlookup_verdict· Look up the verdict the public catalogue has published for an MCP server package on npm or PyPI. Returns found:false when the catalogue has no published verdict for that name; that is not a clean result. Nothing is downloaded or scanned. Th
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Tasks it helps with
Share of each task's required capabilities it covers| Scan code for vulnerabilities Code Review | 50% |
| Review pull requests Code Review | 50% |
| Migrate a codebase to a new framework Code Review | 33% |
| Write technical documentation Code Review | 33% |
Similar tools
Listed for the same task: scan code for vulnerabilities- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- DraugrREMOTELOCALSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk
- Hated WoW MCPREMOTELOCALMCP server for WoW addons: Lua API, UI source, CVars, art, linting, plus model export to glTF/OBJ
- BlackVeil DNS & Email Security ScannerREMOTELOCALDNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits
Ready-made AI agents
- $20/mo · Prices & score →
- $18/mo · free plan · Prices & score →
- $24/mo · free plan · Prices & score →
- Tessl45$100/mo · free plan · Prices & score →
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://skilltriage.moorai.dev/mcp | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Website | https://skilltriage.moorai.dev/api | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Version | 0.6.1 | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 2h ago |
Change history
- NEW31 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is SkillTriage still online?
Free alerts · no account▲ 0Do you run SkillTriage? Know when it stops answering
For publishers · optionalIts hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.
Monitoring never changes a score or a rank.
Questions about SkillTriage
How do I connect SkillTriage?
Use the hosted endpoint https://skilltriage.moorai.dev/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does SkillTriage offer?
When Electra Index connected on 31 Oct 2026, it listed 4 tools: scan_package, scan_mcp_config, scan_skill, lookup_verdict. The full list is in "Live check" above.
Is SkillTriage online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 2h ago.
What can I use SkillTriage for?
Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests, migrate a codebase to a new framework, write technical documentation.