io.github.jamesdfinance-dev/lazaretto

Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

Source

Official Registry

Updated

2026-09-22

// securityCaution

Requires keys· LAZARETTO_API_KEY
Remote endpoint· lazaretto.dev
Runs locally
Official / curated
Open source
Community-trusted

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.jamesdfinance-dev/lazaretto" MCP server from askskill:
Run: claude mcp add 'io-github-jamesdfinance-dev-lazaretto' -- npx -y lazaretto-mcp

// docs

No documentation provided

Check the source repo for usage and examples.

Go to source repo ↗

// from the same source

MCP

lazaretto-mcp

An MCP server that lets an agent verify a skill, tool, or package before it installs it.

—Get→

$ loading_