ModVet

ModVet is a deterministic pre-install security scanner for Claude Code mods that checks directories locally.

ModVet is a deterministic, offline pre-install security scanner designed for Claude Code mods. It inspects mod directories locally in milliseconds to detect prompt-injection patterns, dangerous capabilities, and hardcoded secrets without requiring an account or cloud connection. The tool supports multiple outputs including JSON, SARIF, and human-readable formats, alongside CI-ready exit codes and evidence reports. It is built for developers and auditors who need to verify mod safety before execution. What sets it apart is its combination-based capability analysis, OWASP MCP Top 10 mapping, and update-drift diff scanning.

ModVet at a glance

Best for: Software engineer
Runs on: CLI, self-hosted
Pricing: Free
Released: October 2026
Category: AI coding tool
Website: github.com/joergmichno/modvet

Key features

Scans mod directories offline in milliseconds
Detects prompt injection and instruction override patterns
Analyzes capability combinations and attack primitives
Maps findings to the OWASP MCP Top 10
Produces JSON, SARIF, and human-readable outputs
Provides update-drift snapshot and diff re-auditing
Generates evidence reports for external auditors

Use it for

Scanning Claude Code mods before installation
Auditing mod directories for security vulnerabilities
Running security checks in continuous integration pipelines
Tracking update security drifts in mod versions

Companions

Tools that articles about ModVet recommend using with it, each with its job.

Claude Code — Built to work with Claude Code.
Context7 — Provides up-to-date documentation for AI agents and code editors.
Playwright MCP — Enables LLMs to interact with web pages using structured accessibility snapshots.
GitHub MCP Server — Reads pull requests, issues and code search on GitHub.
Superpowers — Brainstorm, plan and execute skills for bigger tasks.
gstack — Skill bundle for planning, review and shipping.

Alternatives to ModVet

My Claude Code Mods — Adds detailed session profiling, timeline snapshots, and loop detection to Claude Code.
ModLens — Converts screenshots and charts into structured JSON data for coding agents.
Claude Code Harness — Enforces a disciplined delivery loop with verification gates and safety checks.
Claude Mods — Improves readability of model output and tool calls.
Claude Code Mode — Reduces context token usage by returning only the final program result.
Claude DevTools — Restores visibility into Claude Code session logs and tool calls.
Claude Image View — Shows image thumbnails above your Claude Code prompt instead of text tags.
Claude Scrub — Removes exposed API keys, passwords, and tokens from local AI session history.
Claude Code Workflows — Provides pre-built, automated workflows for Claude Code development processes.
claudecode.nvim — Adds native AI coding assistant functionality to Neovim.
opcode — Turns terminal Claude Code workflows into an intuitive visual interface.
claude-mem — It shares persistent, searchable agent memory across sessions and devices.

All ModVet alternatives