菜单
Start, configure, and use the Agent Smith MCP server from Cursor. Use when setting up the MCP server, running scans via MCP tools, or integrating Agent Smith into Cursor IDE workflows.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Run Agent Smith in CTF mode for Capture The Flag challenges. Use when doing CTF, finding flags, hunting exploitable vulnerabilities, or analyzing challenge code for quick wins.
Add new static analysis rules to Agent Smith's rule engine. Use when creating detection rules, adding regex patterns for vulnerabilities, or extending the static scanner.
Interpret and triage Agent Smith scan findings. Use when reading scan results, understanding severity ratings, or deciding what to fix first.
Choose and combine AI analysis profiles for Agent Smith scans. Use when selecting profiles, combining multiple profiles, or understanding which profile fits a target codebase.
Run Agent Smith security scans with the right mode, preset, and flags. Use when scanning code for vulnerabilities, running security audits, or when the user mentions agentsmith, security scan, or vulnerability analysis.
| name | agentsmith-mcp-server |
| description | Start, configure, and use the Agent Smith MCP server from Cursor. Use when setting up the MCP server, running scans via MCP tools, or integrating Agent Smith into Cursor IDE workflows. |
User wants to use Agent Smith as an MCP server from Cursor or another MCP client.
cd ~/agentsmith
source scripts/activate.sh
python3 -m mcp_server
Server starts on http://localhost:2266 with:
http://localhost:2266/ssehttp://localhost:2266/mcp/Already configured in .cursor/mcp.json:
{
"mcpServers": {
"agentsmith": { "url": "http://localhost:2266/mcp/" },
"agentsmith-sse": { "url": "http://localhost:2266/sse" }
}
}
| Tool | What it does |
|---|---|
scan_static | Run Go static scanner on a repo |
scan_hybrid | Static + AI analysis (the main scan) |
scan_mcp | Scan an MCP server for security issues |
scan_file | Analyze a single file with AI |
detect_tech_stack | Auto-detect languages and frameworks |
summarize_results | Summarize latest scan results |
list_findings | List findings from latest scan |
list_presets | Show available presets and their configs |
explain_finding | Get detailed explanation of a finding |
get_fix | Get fix recommendations for a finding |
./scripts/run_mcp_shell.sh
mcp> scan_hybrid preset=quick
mcp> scan_hybrid profile=owasp,flask preset=ctf
mcp> scan_hybrid question="find SQL injection" generate_payloads=true
mcp> scan_static
mcp> scan_mcp 9001
mcp> dvmcp
mcp> summary
mcp> findings 20
mcp> annotations
mcp> payloads
mcp> everything
mcp> help
| Parameter | Default | Description |
|---|---|---|
repo_path | current dir | Path to scan |
preset | mcp | Preset name |
profile | from preset | AI profiles (comma-separated) |
question | none | Focus question for AI |
prioritize_top | from preset | How many files AI analyzes |
top_n | from preset | How many findings get payloads |
generate_payloads | false | Generate exploit payloads |
annotate_code | false | Add code annotations |
| Problem | Fix |
|---|---|
| Server won't start | Check source scripts/activate.sh first |
| "Module not found" | uv pip install -e ".[mcp-server]" |
| Cursor can't connect | Verify server is running on port 2266 |
| Scan timeout | Use --preset mcp for fastest results |