Scan Repositories For Ai Supply Chain And Agent Security Risks With Medusa Security
ASecurity
Use Medusa Security before trusting a repository, dependency, or AI-agent codebase when an agent needs a focused scan for repo poisoning, prompt-injection, MCP, and AI supply-chain findings.
36 stars
0 votes
0 copies
3 views
Added June 2, 2026
ai-agentspythonrustgobashgitsecuritydocumentation
Works with
mcp
Security analysis
A92/100
mediumInstalls packages at runtime which could introduce malicious dependencies
Installs into .claude/skills of the current project.
Are you the author of Scan Repositories For Ai Supply Chain And Agent Security Risks With Medusa Security?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/agentskillexchange-scan-repositories-for-ai-supply-chain-and-agent-se)
---
name: "Scan repositories for AI supply-chain and agent-security risks with Medusa Security"
slug: "scan-repositories-for-ai-supply-chain-and-agent-security-risks-with-medusa-security"
description: "Use Medusa Security before trusting a repository, dependency, or AI-agent codebase when an agent needs a focused scan for repo poisoning, prompt-injection, MCP, and AI supply-chain findings."
github_stars: 256
verification: "security_reviewed"
source: "https://github.com/Pantheon-Security/medusa"
author: "Pantheon Security"
publisher_type: "organization"
category: "Security & Verification"
framework: "Multi-Framework"
tool_ecosystem:
github_repo: "Pantheon-Security/medusa"
github_stars: 256
---
# Scan repositories for AI supply-chain and agent-security risks with Medusa Security
Use Medusa Security before trusting a repository, dependency, or AI-agent codebase when an agent needs a focused scan for repo poisoning, prompt-injection, MCP, and AI supply-chain findings.
## Prerequisites
Python 3.10+, pip, local repository path or remote Git URL
## Installation
Use the upstream install or setup path that matches your environment:
- pip install medusa-security
- git clone https://github.com/yourusername/medusa.git
- pip install -e ".[dev]"
Requirements and caveats from upstream:
- [](https://www.python.org/downloads/)
- | --quick | Quick scan (changed files only, requires git) |
- name: Set up Python
Basic usage or getting-started notes:
- ## π Quick Start
- bash
- # Run your first scan - that's it!
- Source: https://github.com/Pantheon-Security/medusa
- Extracted from upstream docs: https://raw.githubusercontent.com/Pantheon-Security/medusa/HEAD/README.md
## Documentation
- https://docs.medusa-security.dev
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/scan-repositories-for-ai-supply-chain-and-agent-security-risks-with-medusa-security/)