- Agent Guards @mlawsonking/agent-guardsAll six agent guard suites in one local MCP server, with optional cloud intelligence.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Package Guard @mlawsonking/package-guard-mcpSupply-chain guard for AI coding agents: verify packages, check vulns/malware, detect typosquats.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Base Image Eol Lint @jmshinhwa/base-image-eol-lintMarks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Jikida.io MCP @jikida/mcpSecurity tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- RoboShadow @wyre-ai/roboshadow-mcpMCP server for RoboShadow's Rubicon Platform Data API.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- SecObserve @nh4ttruong/secobserve-mcpMCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- ProjectPulse MCP @alexbypa/github-projectpulse-mcpMonitor GitHub repo health, DORA metrics and CI signals from your AI assistant.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Weavatrix Online @weavatrix/weavatrix-onlineWeavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Timps Swarm @sandeeprdy1729/timps-swarm161 AI agents for code gen, health, AI/ML, infra, India-stack. One command.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- BagOS @edycutjong/bagosMCP server for Bags on Solana: token analytics, trade quotes, and gated write operations.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Safe Fetch @sanoy24/safe-fetchMCP server for fetching URLs, safe against SSRF, DNS rebinding, and redirect-to-internal attacks.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- lockvet @matteo-sung/lockvetExplain any lockfile or workflow-pin change: bumps, vulns, ages, deprecations — 61 formats3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- mcp-armor @studiomeyer/armorSecurity sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- dep-scout @unievolver/dep-scoutHelp AI agents find and evaluate mature packages across 6 ecosystems instead of reinventing them.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- GhostFree @shane-js/ghostfreeMCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Arcwall Security @rom-baro/arcwall-securitySecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Npm Plus @ofershap/npm-plusnpm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- VulnFeed @novadyne-hq/vulnfeedDependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- CodeSafer @goldmembrane/codesaferScans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- APSA mobile app security audit @ictechgy/apsaLocal, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.Not assessed yet.Runs on your machine, installed from PyPI.
- MCP Dependency Doctor @petrovicistefan/mcp-dependency-doctorRead-only npm dependency diagnostics for AI coding agents.Not assessed yet.Runs on your machine, installed from npm.
- Watchdog @oxtof/watchdog-mcpWho can change a Solana program or EVM contract, dependency advisories, scans. Paid per call (x402).8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Security MCP @pratham-jain33/security-mcpZero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defensesNot assessed yet.Runs on your machine, installed from PyPI.
- Sourcery @abyssbugg-labs/sourcerySourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
