Talyx

Local supply-chain security software that scans and blocks malicious MCP servers, plugins, skills, hooks, and other artifacts used by AI coding agents.

Talyx discovers artifacts across 27 AI coding agents and analyzes them with tree-sitter AST parsing, source-to-sink taint analysis, content inspection, impersonation detection, and advisory matching. It can block or quarantine malicious artifacts, enforce approved configurations, monitor live MCP sessions, and export CI results as SARIF. It runs on Windows, macOS, and Linux with no account, cloud backend, or telemetry; the scanner core is source-available.

What Talyx does

  • Discovers agent artifacts across 27 coding agents
  • Performs AST and interprocedural source-to-sink taint analysis
  • Scans instructions and tool descriptions for prompt injection and encoded payloads
  • Detects tool shadowing, typosquats, and impersonation
  • Blocks malicious artifacts and quarantines skills

Talyx on Founder Battle

Global rank
#42
Category rank
#2 in Security
Finished battles
8
Wins
2
Losses
6
No contests
0

Recent battle results

Visit Talyx website