Odel

4hmetuyar

18 entries

MCP server: One MCP server.
Elicitation AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Rug Pull DetectorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Baselines an MCP server's tools and detects tool-definition changes after approval

6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Slopsquat ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

5% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Ssl InspectorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

TLS certificate/cipher/protocol inspection

8% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Unbounded Consumption AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

5% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Vector Store ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data

21% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Vulnerability ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
A2A AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Agent Graph AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
AI Code ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Compliance CheckerRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

KVKK/GDPR/CCPA compliance checks for codebases

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Db GatewayRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Dependency AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

CVE scanning for npm/pip/cargo dependencies via OSV

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
DNS IntelligenceRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

DNS record enumeration, misconfiguration and dangling-subdomain detection

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
LLM RedteamRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints

16% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Config AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Memory Poisoning ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Scans agent code for untrusted input poisoning persistent cross-session memory

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Model ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@4hmetuyar · External

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.