Agent Switchboard

I need to scan code for vulnerabilities

Find vulnerabilities, leaked secrets and security holes in code, servers and apps.

15 tools · 5 official

Picked from listings that mention vulnerability, security scan, sast, secrets or pentest in their name, description, tags or skills; those in Security, or with CLI or MCP access, rank higher.

Best fits · 12

SafeWeave
MCP
MCP server with 8 parallel security scanners — SAST, secrets, dependencies, IaC, container, DAST, license, and posture.…
Verifiedby SafeWeave · Security · 4 skills · API Key
Why SAST Scan: Run static analysis security testing on source code and surface vulnerabilities by severity level
HexStrike AI
MCP · CLI
Drive 150+ offensive security tools from an AI agent through one MCP server — reconnaissance, vulnerability scanning…
Verifiedby HexStrike · Security · 3 skills · No auth
Why Vulnerability Scanning: Runs web, network, and binary scanners against a scoped target and normalizes findings into structured results.
Semgrep
API · CLI
Scans source code with AI-assisted SAST, SCA, and secrets detection, finding 8x more true positives with 50% less noise…
Verifiedby Semgrep · Security · API Key
ToolHive
CLI · API · MCP
Runs MCP servers in isolated containers locally or on Kubernetes, with a CLI, desktop UI, operator, registry, and…
Verifiedby Stacklok · Infrastructure & Ops, Security · 4 skills · No auth
Why Secrets Management: Stores encrypted secrets with `thv secret` and injects them into MCP server containers without exposing local credentials.
Snyk Agent Scan
CLI
Security scanner for MCP servers and agent skills. Detects prompt injections, tool poisoning, and sensitive data risks…
VerifiedOfficialby Snyk · Security · 3 skills · API Key
Nightcrawler
CLI
Local AI pentesting agent that runs reconnaissance and vulnerability probing from your own hardware without sending…
Verifiedby Garage HQ · Security · No auth
Shannon
CLI
Pentests web apps and APIs you are authorized to test by reading their source, running real exploits, and reporting…
VerifiedNewby Keygraph · Security · 5 skills · No auth
PentAGI
API · CLI
Executes penetration-testing workflows with autonomous agent teams that chain reconnaissance, exploitation, and…
Verifiedby VXControl · Security · 3 skills · API Key
Why Pentest Reporting: Compiles findings, evidence, and remediation guidance into a structured report at the end of an engagement.
Agent Vault
CLI
Open-source credential proxy for AI agents by Infisical. Agents call APIs without ever seeing secrets — credentials…
Verifiedby Infisical · Security · 4 skills · No auth
Why Credential Injection: Inject API keys and secrets at the network layer so agents never handle credentials directly
JFrog MCP Server
MCP · CLI
Connects AI coding assistants to the JFrog Platform to manage projects and Artifactory repositories and to check…
VerifiedOfficialNewby JFrog · Code & DevTools, Security · 4 skills · OAuth 2.0
Why Check Package Vulnerabilities: Looks up package versions and their vulnerability status, and returns Xray security summaries and violations for…
HOL Guard
CLI
Blocks risky AI coding agent actions at runtime on your machine — shell commands, secret access, MCP servers, plugins…
VerifiedNewby Hashgraph Online · Security, Code & DevTools · 5 skills · No auth
Why Secret Scan: Scans for secret exposure in agent workflows via the separate hol-guard-secrets console entry point.
SkaleAgents
MCP · CLI
Scans Terraform, CloudFormation, Kubernetes and Pulumi IaC plus CI files and Dockerfiles for misconfigurations and…
VerifiedNewby Binary Labs LLC · Code & DevTools, Security · 5 skills · OAuth 2.0

See all 15 on Browse, with filters

Official · 5

The ones published by the company behind the product.

Missing a tool that does this? Suggest a listing.

/tasks/scan-for-vulnerabilities

I need to scan code for vulnerabilities · 15 fit · 5 official · keywords: vulnerability, security scan, sast, secrets, pentest · categories: security · access: cli+mcp

Find vulnerabilities, leaked secrets and security holes in code, servers and apps.

best fits

safeweavemcpSAST Scan: Run static analysis security testing on source code and surface vulnerabilities by severity level hexstrike-aimcp+cliVulnerability Scanning: Runs web, network, and binary scanners against a scoped target and normalizes findings into structured results.semgrepapi+cliScans source code with AI-assisted SAST, SCA, and secrets detection, finding 8x more true positives with 50% less noise than standalone foundation models.toolhivecli+api+mcpSecrets Management: Stores encrypted secrets with `thv secret` and injects them into MCP server containers without exposing local credentials.snyk-agent-scancliSecurity scanner for MCP servers and agent skills. Detects prompt injections, tool poisoning, and sensitive data risks across Claude, Cursor, Windsurf, and 10+ other agents.nightcrawlercliLocal AI pentesting agent that runs reconnaissance and vulnerability probing from your own hardware without sending scope data to a cloud service.shannoncliPentests web apps and APIs you are authorized to test by reading their source, running real exploits, and reporting only findings with a working proof of concept.pentagiapi+cliPentest Reporting: Compiles findings, evidence, and remediation guidance into a structured report at the end of an engagement.agent-vaultcliCredential Injection: Inject API keys and secrets at the network layer so agents never handle credentials directly jfrog-mcpmcp+cliCheck Package Vulnerabilities: Looks up package versions and their vulnerability status, and returns Xray security summaries and violations for…hol-guardcliSecret Scan: Scans for secret exposure in agent workflows via the separate hol-guard-secrets console entry point.skaleagentsmcp+cliScans Terraform, CloudFormation, Kubernetes and Pulumi IaC plus CI files and Dockerfiles for misconfigurations and committed secrets, and reviews app architecture, from an MCP server or offline CLI.

official

snyk-agent-scan, jfrog-mcp, snyk, nvidia-skillspector, open-code-review

related tasks

/tasks/review-contracts5 fitreview contracts and legal documents /tasks/review-code21 fitreview code /tasks/work-with-github36 fitwork with GitHub

more

/browse?task=scan-for-vulnerabilitiesall 15, with filters /tasksevery task /api/tasks/scan-for-vulnerabilitiesthis task as JSONGET · no auth