{"name":"io.github.sinewaveai/agent-security-scanner-mcp","slug":"sinewaveai-agent-security-scanner-mcp","title":null,"description":"Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.","url":"https://mcp.market/server/sinewaveai-agent-security-scanner-mcp","rating":null,"grade":"C","score":58,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":49,"stars":122,"forks":12,"downloads_week":746,"last_push_at":"2026-09-19T07:00:23.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/sinewaveai/agent-security-scanner-mcp","website":null,"version":"2.0.1","remotes":[],"packages":[{"registryType":"npm","identifier":"agent-security-scanner-mcp","version":"2.0.1","transport":{"type":"stdio"}}],"tools":[{"name":"check_package","description":"Check if a package name is legitimate or potentially hallucinated (AI-invented)","write_action":false,"price_micros":0,"input_schema":null},{"name":"fix_security","description":"Scan a file and return the fixed content with all security issues resolved","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_package_stats","description":"List statistics about loaded package lists for hallucination detection","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_security_rules","description":"List all available security fix templates and their descriptions","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_agent_prompt","description":"Scan a prompt/instruction for potential malicious intent before execution. Returns risk assessment and recommended action (BLOCK/WARN/LOG/ALLOW).","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_packages","description":"Scan code for package imports and check for hallucinated (AI-invented) packages","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_security","description":"Scan a file for security vulnerabilities and return issues with suggested fixes","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":58,"grade":"C","scanned_at":"2026-09-28T14:29:17.587Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-09-28T14:29:17.538Z","components":{"code":{"score":3,"max":25,"notes":["24 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 9 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"index.js: …ame, 'analyzer.py'); const result = execSync(`python3 \"${analyzerPath}\" \"${filePath}\"`, { encoding: 'utf-8', …"},{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"index.js: …d(cmd): return subprocess.call(cmd, shell=True) def hash_password(password): retu…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"index.js: …=== \"eval\": { description: \"Avoid eval() - use safer alternatives\", fix: (l…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"agent-security-scanner-mcp","version":"2.0.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-02-05T23:01:18.249Z","repositoryUrl":"git+https://github.com/sinewaveai/agent-security-scanner-mcp.git","weeklyDownloads":746}],"repo":{"found":true,"owner":"sinewaveai","repo":"agent-security-scanner-mcp","archived":false,"pushedAt":"2026-09-19T07:00:23Z","stars":122,"forks":12,"openIssues":23,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/157084199?v=4","ownerCreatedAt":"2024-01-19T02:34:18Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":122,"forks":12,"downloadsWeek":746,"license":"MIT","lastPushAt":"2026-09-19T07:00:23.000Z","score":49}}}},"grade_history":[],"reviews":[]}