MCP.Market

Vuln Check MCP server

by ciloops·io.github.ciloops/vuln-check·v0.1.3·1 stars
No reviews yet

Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed Vuln Check yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Vuln Check tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-24 · same rubric, same numbers if you re-run it

2 medium
  • Code scan3 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (2)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: … "README.md" ], "scripts": { "postinstall": "node install.js" }, "engines": { …
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Vuln Check compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 40% of 915 Security servers
GitHub stars
1
more than 60% of 587 Security servers

Install Vuln Check in Claude Code, Cursor or VS Code

Runs npx -y @ciloops/vuln-check on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vuln-check -- npx -y @ciloops/vuln-check
Add to Cursor

Vuln Check: common questions

Is Vuln Check MCP server safe?
Mostly: it is graded B (75/100). Read the Vuln Check safety report
How do I install Vuln Check?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Vuln Check need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Vuln Check maintained?
The last commit was 12 days ago (2026-10-23). The latest release is v0.1.3.
What can I use instead of Vuln Check?
Servers from other publishers that do the same job: QualityMax QA MCP server, crosscheck MCP server and Jikida MCP server.
How does Vuln Check compare with other Security MCP servers?
safety score 75/100 (higher than 40% of 915 Security servers); github stars 1 (more than 60% of 587 Security servers). Full comparison.

Alternatives to Vuln Check

Same job from other publishers: the closest match first, then the best rated.

  • QualityMax QA MCP
    Final release; the checks moved to 9lives (9l mcp). Local QA MCP: scan, inspect, repro, run tests.
    A
  • crosscheck
    Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.
    A
  • Jikida
    Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
    A
  • 4da
    Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
    A
  • PyMemoryEditor
    Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.
    A