{"name":"io.github.liminalpepe/agent-guard-mcp","slug":"liminalpepe-agent-guard-mcp","title":null,"description":"Verify-before-act safety checks for AI agents: packages, lockfiles, manifests, CI workflows.","url":"https://mcp.market/server/liminalpepe-agent-guard-mcp","rating":null,"grade":"B","score":80,"certified":false,"status":"active","category":"devtools","tags":["devtools","ai"],"presence":{"score":18,"stars":0,"forks":0,"downloads_week":37,"last_push_at":"2026-07-02T11:09:17.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/liminalpepe/agent-guard-mcp","website":null,"version":"0.2.1","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@liminallablibs/agent-guard-mcp","version":"0.2.1","transport":{"type":"stdio"}}],"tools":[{"name":"check_package","description":"Pre-install supply-chain gate for a single npm or PyPI package. Call BEFORE running npm install, pip install, or adding a dependency to package.json. Returns OK | SUSPICIOUS | DANGER (DANGER ~= NO-GO) with typosquat/slopsquat/hallucination flags. Read-only: queries public registries only; does not install anything. Do NOT use for full lockfile audits (use verify_lockfile) or CVE-only scans (use np","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_workflow","description":"Validate CI workflow YAML (GitHub Actions / GitLab CI) BEFORE merging a PR that touches .github/workflows or GitLab CI. Call when reviewing or authoring CI pipelines. Flags mutable action pins (@v1), known-compromised actions, untrusted owners, curl|bash fetch-exec, pull_request_target pwn-request patterns, and secret exposure. Returns risk 0-100 and PROCEED | REVIEW | BLOCK. Read-only. Do NOT use","write_action":false,"price_micros":0,"input_schema":null},{"name":"score_manifest","description":"Score a third-party AI-agent extension manifest (skill/plugin manifest audit) BEFORE install. Call BEFORE installing a Cursor skill, Claude skill, MCP server package, or Smithery plugin. Detects poison/backdoor signatures, credential scope over-reach, and drift vs an approved baseline. Returns risk 0-100 and PROCEED | REVIEW | BLOCK. Supports manifest_type: cursor-skill | claude-skill | mcp-server","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_lockfile","description":"Scan an entire lockfile (direct + transitive deps) BEFORE npm/pip/yarn/pnpm install. Call when the user pastes or generates a lockfile, or before trusting an LLM-written package-lock.json / yarn.lock / pnpm-lock.yaml / poetry.lock / requirements.txt. Returns per-package OK | SUSPICIOUS | DANGER counts and flagged names. Read-only; pass raw file text, not a filesystem path. Do NOT use for a single ","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":80,"grade":"B","scanned_at":"2026-09-26T11:38:24.281Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T11:38:24.318Z","components":{"code":{"score":20,"max":25,"notes":["8 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 86 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"src/manifest.mjs: … [/eval\\s*\\(/, 'HIGH', 28, 'dynamic eval()'], [/new\\s+Function\\s*\\(/, 'HIGH',…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@liminallablibs/agent-guard-mcp","version":"0.2.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-07-01T21:15:42.637Z","weeklyDownloads":37}],"repo":{"found":true,"owner":"liminalpepe","repo":"agent-guard-mcp","archived":false,"pushedAt":"2026-07-02T11:09:17Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/127058519?v=4","ownerCreatedAt":"2023-03-05T22:35:37Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/127058519?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":37,"license":"MIT","lastPushAt":"2026-07-02T11:09:17.000Z","score":18}}}},"grade_history":[],"reviews":[]}