# Prism Scanner

Prism Scanner lets an AI assistant inspect skills, plugins, and MCP servers for threats, then look for agent leftovers on the system. Connect it to run these checks through chat.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 28
- Author: aidongise-cell
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/aidongise-cell/prism-scanner
- Updated: 2026-04-07
- HTML: https://affpapa.org/en/nevibecode/mcp/prism-scanner

## What it does

The MCP server gives the assistant four tools: `prism_scan` examines code, `prism_grade` returns a grade, `prism_clean_scan` searches the system for agent traces, and `prism_clean_plan` prepares a cleanup plan. Its checks cover behavior such as shell commands and data exfiltration, along with prompt injection and persistence mechanisms.

MCP mode uses the `prism-scanner` package with the `[mcp]` extra and starts through `prism-mcp`. For Claude Code, add it with `claude mcp add prism-scanner -- uvx prism-scanner`. Review the cleanup plan before applying changes; cleanup is a separate action, not part of the scan.

## Requirements
- Needs: Python and uv (commands run via uvx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add prism-scanner -- uvx prism-scanner
```
uvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>

### Codex

**Platform CLI**
```bash
codex mcp add prism-scanner -- uvx prism-scanner
```
uvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "prism-scanner": {
            "command": "uvx",
            "args": [
                "prism-scanner"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "prism-scanner": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "prism-scanner"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add prism-scanner uvx prism-scanner
```
uvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>

## When to use it
- inspect a skill before installing it
- find risky shell execution in code
- search the system for agent traces
- prepare a plan to remove detected traces

## Example prompts
- Scan this skill for malicious behavior and explain the findings.
- Grade this MCP server and show me the security issues.
- Search my system for agent traces and prepare a cleanup plan.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md