AgentStack
MCP verified MIT Self-run

Scopeblind Protect Skill

mcp-tomjwxf-scopeblind-protect-skill · by tomjwxf

Claude Code skill for ScopeBlind trust stack — agent identity, MCP security, signed receipts, offline verification.

No reviews yet
0 installs
6 views
0.0% view→install

Install

$ agentstack add mcp-tomjwxf-scopeblind-protect-skill

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Scopeblind Protect Skill? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

scopeblind

Claude Code skill for the ScopeBlind trust stack — agent identity, MCP security, signed receipts, and offline verification.

Install

claude plugin marketplace add tomjwxf/scopeblind-protect-skill
claude plugin install scopeblind

Or manually copy SKILL.md into your project directory.

What it does

Teaches Claude Code to use the full ScopeBlind stack:

  • @scopeblind/passport — create portable agent identity (Ed25519 keypairs, signed manifests, portable bundles)
  • protect-mcp — wrap MCP servers with per-tool policies and signed receipts
  • @veritasacta/verify — verify any receipt offline (MIT, no accounts)
  • @scopeblind/red-team — benchmark policies against attack patterns

Quick start

# Create an agent identity
npx @scopeblind/passport create --name "Luna" --runtime openclaw --policy shadow

# Wrap an MCP server (shadow mode — logs everything, blocks nothing)
npx protect-mcp -- node server.js

# Test a stricter policy
npx protect-mcp simulate --policy strict.json

# Verify receipts offline
npx @veritasacta/verify --self-test

Links

License

MIT

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.