mcp-security-scanner good first issues (TypeScript)

Auto-discover local MCP config files 3 months ago

enhancement help wanted

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add init command for project scanner config 3 months ago

enhancement help wanted

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

good first issue: detector for filesystem over-permission 4 months ago

good first issue rule security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add --fail-on severity threshold for CI 4 months ago

enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add GitHub Action PR summary comments 4 months ago

enhancement help wanted

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add Markdown report output 4 months ago

documentation enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Publish a short report on security patterns in 20 MCP servers 4 months ago

help wanted research

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add adversarial benchmark fixtures for known false negatives 4 months ago

help wanted research security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

good first issue: stabilize JSON output schema 4 months ago

enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

research: map known MCP vulnerabilities to detector rules 4 months ago

help wanted research security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add configurable rule suppressions 4 months ago

enhancement good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add real-world MCP config fixtures 4 months ago

documentation good first issue

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Improve SARIF locations for GitHub code scanning 4 months ago

enhancement help wanted sarif

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add MCP registry scanner 4 months ago

enhancement help wanted

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

Add domain allowlist detection for network tools 4 months ago

enhancement good first issue rule security

lorbeere711/mcp-security-scanner

1

The npm-audit for MCP servers: scan AI agent tools for dangerous permissions, prompt injection, and data exfiltration risks.

TypeScript

#ai-agents#anthropic#claude#developer-tools#mcp#model-context-protocol#prompt-injection#sarif#security#static-analysis

lorbeere711/mcp-security-scanner

Open Issues Need Help