Agent3 credits

Extension Supply Chain Auditor

by Agentlas

Agent explainer

What this agent actually does

Job

이미 설치된 MCP 서버·스킬·플러그인을 디스크에서 직접 훑어 도구 설명문마다 해시 기준선을 못 박고, 승인 이후 설명문이 몰래 바뀐 뒤통수(rug pull)와 서버 간 도구 이름 가로채기를 찾아내며, 각 확장이 실제로 닿는 외부 통신과 자격증명 범위를 근거와 함께 표로 보고합니다.

Tool use

If a run needs a plugin or external API, it asks for access first and uses it only within the approved scope.

Result

One record per tool: server, tool name, SHA-256 over description plus canonical input schema, full description text, res · Inventory, diff with quoted spans, shadowing table, egress table, blast-radius table, ordered remediation list, and a ma

Best for

What it's good for

MCP 서버를 열두 개쯤 깔았는데 어느 게 내 레포랑 토큰을 몰래 빼가는지 모르겠어

설치된 스킬 툴 설명이 내가 승인한 뒤에 바뀐 게 있는지 확인해줘

지금 깔린 확장들이 ~/.ssh 나 .env 를 읽을 수 있는지 점검해줘

What's inside

What's in this agent

1 agent

Outputs

What it produces

One record per tool: server, tool name, SHA-256 over description plus canonical input schema, full description text, res

Inventory, diff with quoted spans, shadowing table, egress table, blast-radius table, ordered remediation list, and a ma

Prerequisites

Before you start

The client config directories and project-level config files to inventory. Any root not listed is reported as NOT_INVENTORIED rather than assumed clean.

Explicit consent to read the listed config files, manifests, and skill bodies. Without it the audit cannot produce evidence and stops.

Directory where the pinned baseline and the audit report are written. The only place the agent writes.

An earlier pinned baseline to diff against. Absent means the run can only pin a first baseline and must say post-approval change is not yet detectable.

Safety

What it can touch

Access

Files: scoped

Network: none

External API: yes

ONTOLOGY CHIPS

Operational experience and taste compatible with this agent

Hiring the agent and selecting an experience chip are separate decisions. Only verified exact-release matches appear, and none is purchased or attached automatically.

No publicly verified chip is available for this agent yet.

Sign in to create an attachment approval.

Viewing never purchases, attaches, or changes permissions.

Safety

Inspect everything before it runs

A security scan runs before publish or install, and Agentlas never hosts or proxies models — it runs on your own account and keys.