lorbeere711/mcp-security-scanner

Auto-discover local MCP config files about 2 hours ago

enhancement help wanted

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add init command for project scanner config about 2 hours ago

enhancement help wanted

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

good first issue: detector for filesystem over-permission about 1 month ago

good first issue rule security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add --fail-on severity threshold for CI about 1 month ago

enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add GitHub Action PR summary comments about 1 month ago

enhancement help wanted

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add Markdown report output about 1 month ago

documentation enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Publish a short report on security patterns in 20 MCP servers about 1 month ago

help wanted research

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add adversarial benchmark fixtures for known false negatives about 1 month ago

help wanted research security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

good first issue: stabilize JSON output schema about 1 month ago

enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

research: map known MCP vulnerabilities to detector rules about 1 month ago

help wanted research security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add configurable rule suppressions about 1 month ago

enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add real-world MCP config fixtures about 1 month ago

documentation good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Improve SARIF locations for GitHub code scanning about 1 month ago

enhancement help wanted sarif

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add MCP registry scanner about 1 month ago

enhancement help wanted

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add domain allowlist detection for network tools about 1 month ago

enhancement good first issue rule security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Open Issues Need Help