Audit MCP servers, skills, and agent plugins

An extension manifest describes intended capability. A traced run shows the effects that actually occurred when an agent selected and executed the extension.

Inventory child processes and external destinations.

Separate declared access from observed access.

Retain a review artifact for a specific version and task.

Use a representative task

Choose a bounded prompt that exercises the extension without granting unrelated authority. Record the agent and extension process family, then compare observed effects with the manifest and the task you authorized.

Review evidence, not just alerts

A network connection or file write is not automatically malicious. Attribute each effect to a task step, verify whether it was necessary, and flag unexplained or over-broad behavior for a second run or code review.

Terminal

$ sudo agentsight record -- <agent-command>
$ agentsight report audit --json

Primary sources

AgentSight record and audit workflow