argus-scan

v1.9.0

Dependency and secret scanning for agent workflows. Skills audit lockfiles and diffs; the MCP server serves a live advisory feed.

2 skills1 MCP serverstreamable-http

by Copperkey SecurityApache-2.03kupdated 3 weeks ago

Install

$ git clone https://github.com/copperkey/argus-scan

Clone into your agent client’s plugin directory — components are discovered from fixed locations per the spec.

Layout

argus-scan/

├── plugin.json
├── skills/
│   ├── dependency-audit/
│   │   └── SKILL.md
│   └── secret-scan/
│       └── SKILL.md
└── mcp.json

Skills2

dependency-auditskills/dependency-audit/

Audit lockfile changes against known advisories and flag newly introduced transitive risk.

secret-scanskills/secret-scan/

Scan a diff for committed credentials and produce rotation steps for anything found.

MCP servers1

advisoriesstreamable-http

url: https://mcp.copperkey.io/advisories

Manifest

plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "argus-scan",
  "version": "1.9.0",
  "description": "Dependency and secret scanning for agent workflows. Skills audit lockfiles and diffs; the MCP server serves a live advisory feed.",
  "author": {
    "name": "Copperkey Security",
    "url": "https://copperkey.io"
  },
  "repository": "https://github.com/copperkey/argus-scan",
  "license": "Apache-2.0",
  "keywords": [
    "security",
    "dependencies",
    "secrets"
  ]
}