garagon

Scan skills, MCP configs, and agent content for injection and supply-chain risks. Offline, no LLM.