MCP security scanner β offline, deterministic AβF Trust Score for Model Context Protocol servers. Detects tool poisoning, prompt injection & toxic flows.
graygnatconsole/mcp-audit-toolπ‘οΈ Security audit CLI for Model Context Protocol (MCP) servers β scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI
flankerhqd/cyvisguardSecurity control plane for AI agents β identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
PyModel/jev-judge-mcpTyped judgment tools for MCP agents. TypeSafe's Jev model as verify, screen, find, classify, rerank, decide, compare, extract, review, gate, and score: the model judges, policy decides auto, review, o
agent-chaperone/agent-chaperoneScreens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.
batrapulkit/squidbrakeBrakes for your AI agents: every tool call is checked against your rules, held for human approval when risky, and recorded in a tamper-evident audit trail. Works with Claude Code and any MCP app.
12122J/mcpvetMCP security scanner β vet a Model Context Protocol server before you add it to Claude Code, Cursor, or Windsurf. Grades it AβF, catching credential theft, tool-poisoning, and install-script payloads
FarzamHabibi/pre-production-checklistPre-production checklists for solo founders. 4,337 items, 88% portable to any stack, 26 stack supplements β plus AI/agent security and the bugs AI coding assistants actually write.
alphaparkinc/genpark-ragas-faithfulness-answer-relevance-evaluator-skillGenPark AI Agent Skill - Calculates RAG faithfulness ratios, context claim grounding and semantic answer relevance metrics.
Alpha-Park/genpark-ragas-faithfulness-answer-relevance-evaluator-skillGenPark AI Agent Skill - Calculates RAG faithfulness ratios, context claim grounding and semantic answer relevance metrics.
alphaparkinc/genpark-synthetic-text-ngram-diversity-entropy-scorer-skillGenPark AI Agent Skill - Distinct-N ngram diversity ratio and Shannon entropy evaluator detecting model mode collapse and loops.
alphaparkinc/genpark-prompt-injection-jailbreak-detector-skillGenPark AI Agent Skill - Heuristic and statistical prompt injection and jailbreak detector with semantic delimiter protection and adversarial pattern scoring.
alphaparkinc/genpark-adversarial-redteam-prompt-injection-fuzzer-skillGenPark AI Agent Skill - Multi-turn jailbreak and indirect prompt injection fuzzer evaluating LLM agent safety guardrails.
Alpha-Park/genpark-prompt-injection-jailbreak-detector-skillGenPark AI Agent Skill - Heuristic and statistical prompt injection and jailbreak detector with semantic delimiter protection and adversarial pattern scoring.
alphaparkinc/genpark-synthetic-tabular-correlation-copula-aligner-skillGenPark AI Agent Skill - Covariance and correlation alignment engine ensuring synthetic datasets preserve multi-attribute feature dependencies.
alphaparkinc/genpark-label-noise-confident-learning-pruner-skillGenPark AI Agent Skill - Confident learning joint distribution estimator identifying mislabeled training samples for data cleaning.
Alpha-Park/genpark-synthetic-text-ngram-diversity-entropy-scorer-skillGenPark AI Agent Skill - Distinct-N ngram diversity ratio and Shannon entropy evaluator detecting model mode collapse and loops.
Alpha-Park/genpark-label-noise-confident-learning-pruner-skillGenPark AI Agent Skill - Confident learning joint distribution estimator identifying mislabeled training samples for data cleaning.
Alpha-Park/genpark-synthetic-tabular-correlation-copula-aligner-skillGenPark AI Agent Skill - Covariance and correlation alignment engine ensuring synthetic datasets preserve multi-attribute feature dependencies.
Alpha-Park/genpark-adversarial-redteam-prompt-injection-fuzzer-skillGenPark AI Agent Skill - Multi-turn jailbreak and indirect prompt injection fuzzer evaluating LLM agent safety guardrails.
alphaparkinc/genpark-indirect-prompt-injection-sanitizer-skillIndirect prompt injection sanitizer and delimiter boundary firewall neutralizing embedded command overrides
Alpha-Park/genpark-adversarial-prompt-jailbreak-detector-skillAdversarial prompt jailbreak detector analyzing framing evasion, hypothetical bypasses, and token smuggling
alphaparkinc/genpark-adversarial-prompt-jailbreak-detector-skillAdversarial prompt jailbreak detector analyzing framing evasion, hypothetical bypasses, and token smuggling
alphaparkinc/genpark-covert-data-exfiltration-firewall-skillEgress data exfiltration firewall detecting obfuscated credentials, private keys, and API tokens in payloads
Alpha-Park/genpark-indirect-prompt-injection-sanitizer-skillIndirect prompt injection sanitizer and delimiter boundary firewall neutralizing embedded command overrides
alphaparkinc/genpark-agent-tool-permission-rbac-validator-skillRole-based access control and tool privilege attenuator preventing unauthorized tool invocations
Alpha-Park/genpark-autonomous-honeypot-canary-sentinel-skillDynamic honeypot and cryptographic canary token sentinel detecting prompt extraction and triggering session freezes
Alpha-Park/genpark-agent-tool-permission-rbac-validator-skillRole-based access control and tool privilege attenuator preventing unauthorized tool invocations
Alpha-Park/genpark-covert-data-exfiltration-firewall-skillEgress data exfiltration firewall detecting obfuscated credentials, private keys, and API tokens in payloads
alphaparkinc/genpark-autonomous-honeypot-canary-sentinel-skillDynamic honeypot and cryptographic canary token sentinel detecting prompt extraction and triggering session freezes
alphaparkinc/genpark-agent-deadlock-liveloss-loop-detector-skillTrajectory state entropy and cyclic repetition detector identifying autonomous agent infinite tool loops and planning deadlocks.
Alpha-Park/genpark-agent-prompt-injection-jailbreak-sentinel-skillMulti-vector heuristic prompt injection and jailbreak detector analyzing system overrides, delimiter breakouts, and base64 payload evasion.
alphaparkinc/genpark-agent-bash-command-sandbox-guard-skillZero-dependency AST & heuristic bash command sandbox guard blocking destructive system mutations, path traversals, and reverse shells.
alphaparkinc/genpark-agent-synthetic-data-differential-privacy-guard-skillDifferential privacy epsilon-noise generator and quasi-identifier redaction kernel protecting tabular data releases from re-identification.
Alpha-Park/genpark-agent-deadlock-liveloss-loop-detector-skillTrajectory state entropy and cyclic repetition detector identifying autonomous agent infinite tool loops and planning deadlocks.
alphaparkinc/genpark-agent-prompt-injection-jailbreak-sentinel-skillMulti-vector heuristic prompt injection and jailbreak detector analyzing system overrides, delimiter breakouts, and base64 payload evasion.
Alpha-Park/genpark-agent-bash-command-sandbox-guard-skillZero-dependency AST & heuristic bash command sandbox guard blocking destructive system mutations, path traversals, and reverse shells.
Alpha-Park/genpark-agent-synthetic-data-differential-privacy-guard-skillDifferential privacy epsilon-noise generator and quasi-identifier redaction kernel protecting tabular data releases from re-identification.
KernelLord/pickysteveSkill router and context picker for Claude Code, Cursor, and Aider. Auto-picks the right skill for every prompt, with prompt-injection filtering for MCP.
howshannon/trust-issuesAdversarial security review for AI skills, repos, MCP servers, and packages before you install them. A read-only scanner plus a five-persona reasoning pass, ending in a GO / GO WITH MITIGATIONS / NO-G
Octolabo/malskannerScan a repo for hidden prompt-injection before your AI agent trusts it β CLI, MCP server & GitHub Action. Run: npx malskanner <repo>. 0 false positives across 5,620 files.
kinde-starter-kits/jev-agent-authorizationJev agent authorization for MCP tool calls: Kinde identity and permissions plus Jev's typed, calibrated decisions, checked server-side before every call runs
chawdamrunal/assayMCP & Claude Code security scanner β threat-models plugins, MCP servers, hooks, skills & connectors with an LLM before you trust them. Catches prompt injection, tool poisoning & credential exfiltratio
nichewizard/quickbooks-mcpA QuickBooks MCP server built for real books. Exposes QuickBooks Online as callable tools over the Model Context Protocol, with every create, update and delete gated behind human approval and a plain-
TikyParkinson/mcp-agent-guardrails-spring-boot-starterSecurity & governance guardrails for MCP agents in Java β audit trail, agent-to-tool authorization, prompt-injection detection and rate limiting as a zero-config Spring Boot starter.
yagyeshVyas/VibeGuardFree security & privacy scanner for AI-coded apps. 699 rules, 76 MCP tools, 13-layer defense, zero-trust sandbox, AI firewall. Runs locally, never sends data anywhere. Scan your AI-generated app for l
eltociear/mcp-auditScan MCP servers & AI-agent skills for malicious patterns (prompt injection in tool descriptions, credential exfil, download-and-execute). 17 patterns / 60 signatures, zero-dep. Measured over 196 publ
lindixu6-hash/awesome-agentic-engineeringExecutable AI agent readiness gate: GitHub Action, prompt injection evals, LangGraph traces, risk profiles, and bilingual EN/δΈζ docs.
VirajMishra1/bouncerIntent firewall for AI agents β NVIDIA Nemotron checks every tool call against the user's goal and blocks prompt-injection hijacks before they run.
HUA503/mcprismFast single-binary security scanner for MCP (Model Context Protocol) servers β config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully offline β trivy for