cfgaudit

cfgaudit/cfgaudit

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

61 good first / help-wanted issues · Go · last activity Oct 21, 2026

8 stars 2 forks 8 watchers Go Apache License 2.0

agent-security agentic-ai ai-agents ai-security claude claude-code copilot cursor devsecops gemini-cli go mcp model-context-protocol owasp prompt-injection sarif security security-audit static-analysis supply-chain-security

View on GitHub Website

61 Open Issues Need Help Last updated: Oct 21, 2026

Open Issues Need Help

View All on GitHub

--plugins on a skill under .claude/skills without a manifest reports a false CFG109 error 1 day ago

bug good first issue P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG036 Part D misses a download piped through a decoder into a shell 1 day ago

enhancement good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG036 Part E misses a base64 decode passed to eval through a command substitution 1 day ago

enhancement good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG036 Part F misses a password-archive run step inside the command or before the password line 1 day ago

enhancement good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG048 does not read terminal.integrated.env.* in .vscode/settings.json 1 day ago

enhancement good first issue rule P2 agent: vscode

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

plugin.json component paths that leave the plugin root are not reported 1 day ago

enhancement good first issue rule P2 agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG122/CFG123 tool list lacks fd, rg and stty 1 day ago

enhancement good first issue rule P3 agent: kimi-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG049 does not check the remote URL passed to an MCP stdio proxy such as mcp-remote 1 day ago

enhancement good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG012 does not know permissions.blockWritesOutsideWorkingDirectories and blockReadsOutsideWorkingDirectories 1 day ago

enhancement good first issue rule P3 agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Devin hooks with a matcher written as a list are dropped or reported as a parse error 1 day ago

bug good first issue rule P2 agent: devin

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

OpenCode provider baseURL is not checked by CFG071 1 day ago

enhancement good first issue rule agent: opencode

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG072 reports a substitution that is the whole URL host, followed by a port 1 day ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

A plugin manifest that points at the project .mcp.json makes every MCP finding appear twice 2 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG007 reports a credential in permissions.allow at the line of the array, not the entry 2 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG080 misses a GPL notice that is not at the start of the HTML comment 2 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG031 reads "has no .credentials.json" as a read and reports .crt.pem and WWDR.pem certificates 2 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG050 reports the placeholder ghp_SECRETTOKEN as a hardcoded credential 2 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG027 reports crontab -l and command -v crontab as installing a persistence entry 2 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG078 reports a Keychain existence check without -w or -g as a credential read 2 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG051 splits allowed-tools inside parentheses, so Bash(git -C * status) is reported as a bare * at error 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG035 reports a refusal to add an MCP server 3 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG037 reports SSH key names in a guard hook's grep pattern 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG054 scores ${VAR:-default} references as high-entropy literals 3 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG090 reports "list" as a noun, an attacker as subject and a quoted OS permission dialog 3 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG101 suggests an evasion spelling that the deny list already contains 3 days ago

bug good first issue rule P3 agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG055 reports the registration of an in-repo directory marketplace 3 days ago

bug good first issue rule P3 agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG023 reports interpreter --version entries, and duplicate allow entries share one line 3 days ago

bug good first issue rule P3 agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG015 reports backticks inside single quotes and variants of its documented exemptions 3 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG009 reports framework variables of other agents and Claude variables that do not exist 3 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG056 reports 'always use when', 'regardless of' and qualified universal nouns as always-on triggers 3 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG006 reports a missing deny list when the permissions block allows nothing 3 days ago

bug good first issue rule P3 agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG050 reports AZURE_TOKEN_CREDENTIALS, a credential selector, as a hardcoded secret 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG080 reports file descriptions and license boilerplate in HTML comments as hidden directives 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG032 reports example dialogues in fences, <SYSTEM> placeholders and REQUIRED in tag names 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG026 reports defensive rules about untrusted input, other senses of "ignore", and Developer Mode on a device 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG036: word-boundary, colon-scope, loopback and env-lookup false positives 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG031 reports public keys and certificates, copy destinations and refused reads 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG029 reports prohibitions, program documentation and risk tables as permission bypasses 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG030 reports hiding a probe's error output as concealing behaviour 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG113 reports downloading and running an installer as following remote instructions 3 days ago

bug good first issue rule P2

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG010: check every npx --package / -p for a version pin 6 days ago

bug good first issue rule

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Warn on repeated --config and on an ID in both --only and --skip 6 days ago

enhancement good first issue

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG109 flags Claude Code settings files that Claude Code loads (BOM, empty file) 6 days ago

bug good first issue agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Kimi Code: scan agents.md and .kimi-code/AGENTS.md 7 days ago

enhancement good first issue core agent: kimi-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Gemini CLI: scan skills in .gemini/skills 7 days ago

enhancement good first issue agent: gemini-cli

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG032: add <|endoftext|>, <|eot_id|> and the header-id tokens 8 days ago

enhancement good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Add a pre-commit hook definition 8 days ago

enhancement good first issue P3 integration

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG023: report Bash(rg:*), since rg --pre runs a command per file 8 days ago

enhancement good first issue rule P2 agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG028: also report writes to other agents' config files (.cursor/, .roo/, .gemini/, .codex/) 8 days ago

enhancement good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG054 reports a JSON object stored in an MCP env value as a high-entropy secret 8 days ago

bug good first issue rule P3

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG048: cite CVE-2026-102231 next to CVE-2026-81381 for the ADO code search override 9 days ago

documentation good first issue P3 agent: vscode

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG080 misses HTML comments closed by --!> or never closed 9 days ago

bug good first issue rule

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG024: cover the remaining emoji ranges in the ZWJ test 13 days ago

good first issue tests

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Test CFG109 for broken Zed, Grok and skills-lock.json files 13 days ago

good first issue tests

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Test the --claude-version and --shellcheck fallbacks 13 days ago

good first issue tests

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

CFG045: test the ShellCheck call with a fake binary 13 days ago

good first issue tests

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Claude Code settings env: proxy, CA bundle and TLS-off variables are not checked 13 days ago

enhancement good first issue agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Docs: Cline reads .claude/skills, Kimi Code 2.2.0 trust changes 14 days ago

documentation good first issue agent: cline agent: kimi-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

Claude Code hooks: exec-form args are not read by the command rules 14 days ago

enhancement good first issue agent: claude-code

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

OpenCode: an mcp.servers entry named like an MCP field (command, url, ...) fails the file and escapes the MCP rules 14 days ago

bug good first issue

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security

False positives since Claude Code 2.1.299: single-string enabledMcpjsonServers (CFG012/CFG006) and empty .mcp.json (CFG109) 14 days ago

bug good first issue

cfgaudit/cfgaudit

8

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Go

#agent-security#agentic-ai#ai-agents#ai-security#claude#claude-code#copilot#cursor#devsecops#gemini-cli#go#mcp#model-context-protocol#owasp#prompt-injection#sarif#security#security-audit#static-analysis#supply-chain-security