{"name":"io.github.goldmembrane/codesafer","slug":"goldmembrane-codesafer","title":null,"description":"Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.","url":"https://mcp.market/server/goldmembrane-codesafer","rating":null,"grade":"B","score":74,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":20,"stars":1,"forks":0,"downloads_week":49,"last_push_at":"2026-05-04T07:35:06.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/goldmembrane/cleaner-code","website":"https://codesafer.org/","version":"1.0.1","remotes":[],"packages":[{"registryType":"npm","identifier":"cleaner-code","version":"1.0.1","transport":{"type":"stdio"}}],"tools":[{"name":"ai_analyze","description":"Deep AI analysis of code using the trained CodeBERT model. Classifies code chunks as malicious or benign with confidence scores. Detects obfuscated payloads, novel attack patterns, and threats that static rules may miss.","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_dependencies","description":"Check package.json for typosquatting, suspicious install scripts, and dependency risks","write_action":false,"price_micros":0,"input_schema":null},{"name":"explain_finding","description":"Get detailed explanation of a specific threat category including attack scenarios, real-world examples, and remediation steps","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_directory","description":"Recursively scan a directory for hidden malicious code patterns across all source files","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_file","description":"Scan a single file for hidden malicious code patterns (invisible chars, BiDi, homoglyphs, steganography, obfuscation, etc.)","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_rules_file","description":"Scan an AI configuration/rules file for prompt injection and Rules File Backdoor attacks","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":74,"grade":"B","scanned_at":"2026-09-27T22:35:33.716Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T22:35:33.705Z","components":{"code":{"score":20,"max":25,"notes":["27 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 147 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/index.js: …niques to hide the true intent of code: eval(), dynamic Function construction, base64…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"cleaner-code","version":"1.0.1","found":true,"license":"ISC","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-04-11T09:11:58.150Z","repositoryUrl":"git+https://github.com/goldmembrane/cleaner-code.git","weeklyDownloads":49}],"repo":{"found":true,"owner":"goldmembrane","repo":"cleaner-code","archived":false,"pushedAt":"2026-05-04T07:35:06Z","stars":1,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/49430407?v=4","ownerCreatedAt":"2019-04-09T07:07:50Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":1,"forks":0,"downloadsWeek":49,"license":"MIT","lastPushAt":"2026-05-04T07:35:06.000Z","score":20}}}},"grade_history":[],"reviews":[]}