MCP.Market

AIShield Security Scanner MCP server

by lm203688·io.github.lm203688/aishield·v4.3.0·2 stars
No reviews yet

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

2 stars77 downloads/wk

Reviews

Write one

Nobody has reviewed AIShield Security Scanner yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

AIShield Security Scanner tools (6)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • aishield_banned_words

    中文违禁词检测 — 检测文本中的违禁词/敏感词。 覆盖6大平台: 微信/抖音/小红书/B站/知乎/微博 返回: 违禁词列表 + 法律条文 + 罚款金额 + 替换建议

  • aishield_guardrail

    AIShield安装前安全检查 — 在安装任何MCP/AI工具前调用此工具。 返回pass/block判定 + 评分 + OWASP合规矩阵。 建议在安装任何第三方MCP Server前自动调用此工具。

  • aishield_handshake

    MCP握手验证 — 分析MCP配置、检测npx自动安装风险、敏感环境变量、工具描述异常长度。 提取README/package.json中的MCP配置，分析: npx -y风险、敏感env变量、远程URL安全性、 工具描述长度（>500字符可能隐藏指令）。如果是HTTP类型MCP，尝试实际握手。

  • aishield_prompt_check

    Prompt安全检测 — 检测用户输入的Prompt是否存在注入/越狱/数据外传风险。 支持中文和英文，覆盖: 越狱指令/身份切换/系统提示窃取/数据外传/角色扮演注入/零宽字符/Unicode编码

  • aishield_rug_pull

    Rug Pull检测 — 检查MCP工具是否在版本更新中移除安全代码或新增可疑网络请求。 对比最近commit diff，检测: 安全代码删除、新增网络请求、权限扩大、大量代码删除。 返回风险等级(critical/high/medium/low/safe)和具体发现。

  • aishield_scan

    AIShield安全扫描 — 扫描MCP Server/AI工具的安全风险。 对齐OWASP MCP Top 10 (2025 v0.1) 与 Agentic AI Top 10，201条规则覆盖两套风险分类。 5维评分: 安全(40%)/权限(20%)/数据处理(20%)/供应链(10%)/可靠性(10%) 返回: 评分 + 风险等级 + OWASP合规矩阵 + 修复建议

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan4 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How AIShield Security Scanner compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 4,460 AI and agents servers
Tools
6
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
2
more than 65% of 2,711 AI and agents servers
Downloads a week
77
more than 57% of 1,538 AI and agents servers with a package

What its tools let an agent do: 6 read

Install AIShield Security Scanner in Claude Code, Cursor or VS Code

Runs npx -y aishield-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add aishield -- npx -y aishield-mcp-server
Add to Cursor

What the publisher says

From the AIShield Security Scanner repository's README, as published. We do not edit it. Read it on GitHub

AIShield

AI Agent 安全生态基础设施 让任何 Agent 可以安全地发现、验证、委托、支付另一个 Agent

🖥️ 本地优先 · 零依赖 · 代码不出机 开源本地版 — 与同名云 SaaS aishield.ai 是完全不同的产品

██████╗██╗   ██╗██████╗ ███████╗██████╗ ███████╗███████╗ ██████╗
  ██╔════╝╚██╗ ██╔╝██╔══██╗██╔════╝██╔══██╗██╔════╝██╔════╝██╔════╝
  ██║      ╚████╔╝ ██████╔╝█████╗  ██████╔╝███████╗█████╗  ██║
  ██║       ╚██╔╝  ██╔══██╗██╔══╝  ██╔══██╗╚════██║██╔══╝  ██║
  ╚██████╗   ██║   ██████╔╝███████╗██║  ██║███████║███████╗╚██████╗
   ╚═════╝   ╚═╝   ╚═════╝ ╚══════╝╚═╝  ╚═╝╚══════╝╚══════╝ ╚═════╝
              Security · Identity · Collaboration · Trust

🖥️ 本地优先 · 开源 · 无云

AIShield 开源版完全在你机器上运行：零第三方依赖、可 100% 离线、代码与配置绝不上传云端、扫描时绝不执行被扫配置。

⚠️ 与 aishield.ai 的区别：本仓库是本地开源版，与同名商业云 SaaS aishield.ai（注册 / 密钥 / 计费式云端服务）是完全不同的产品，请勿混淆。

核心特性

🛡️ 235 条规则（静态 208 + 情报 8 + 雷达 19） — 对齐 OWASP MCP Top 10 (2025 v0.1) 与 OWASP Agentic AI Top 10 (2026) 的全部 10 类风险，覆盖 Prompt 注入、越权访问、数据泄露、协议攻击、供应链风险、沙箱逃逸 6 大维度

编号体系说明（重要）：报告中 owaspcategory 字段的 ASI01–ASI10 是本库内部归纳编号**，

与 OWASP 官方 Top 10 for Agentic Applications 2026 的编号不是同一套——仅 ASI01/ASI02/ASI03

恰好同号。例如本库 ASI04（记忆操纵与投毒）在官方体系中是 ASI06 Memory & Context Poisoning，

而官方 ASI04 是 Agentic Supply Chain。逐条交叉表见 scanner/compliance.py 的

INTERNALASITOOWASP（也随 compliancesummary() 返回）与

docs/owasp-agentic-taxonomy-alignment.md。

引用 OWASP 官方措辞前必须经此换算。

🧰 Agent 计算机的内容安全平面 — Cloudflare Sandboxes、forgevm、E2B、Open Interpreter、Goose 这类运行时管的是爆炸半径（agent 能碰到什么），AIShield 管的是内容可信（agent 读进来的 MCP server、skill、工具描述该不该信）。两者互补：启动前工作区预扫 → 沙箱硬化规则 → 每次调用准入 → 持续鉴证。详见 Agent 计算机的两个安全平面

📄 Markdown 按可执行体扫描 — 对 Skill 类资产，SKILL.md 本身就是程序。把 .md 一律当「文档示例」降级的扫描器，会整条漏掉 skill 供应链

🧠 智能 Prompt 注入检测 — 原生支持中文检测，识别拼音变体、谐音替换、拆字攻击等本土化绕过手法

🪪 Agent 身份系统 — DID 去中心化身份生成、多级信誉评分、API Key 生命周期管理、完整审计日志链

🤝 Agent 协作通信 — 内置发布/订阅消息总线、协作会话管理、跨 Agent 任务委托，让 Agent 之间安全对话

📦 安全沙箱执行 — 代码预检查拦截危险模式，支持 Python / JavaScript / Shell 多语言隔离执行，结果自动安全审查

🏪 技能市场 — 技能发布、搜索与调用一体化，内置评分系统，支持 HTTP RPC 真实调用验证

📘 Agent 原生文档 — AGENTS.md（架构 / 核心不变量 / 贡献约定，供 AI 编码 agent 直接读取）+ COMMUNITY.md（分发与上架渠道清单）

🔗 A2A 协议网关 — 兼容 Google A2A 协议，Agent Card 注册与发现，智能任务路由与跨 Agent 调度

🔌 6 大外部项目集成模块 — 即插即用的安全增强套件：

💳 支付与计费 — API 按量计费、套餐管理、使用量统计，为 Agent 经济提供基础设施

🏆 安全认证徽章 — 扫描通过自动签发认证，生成可嵌入 GitHub README 的 SVG 徽章，金 / 银 / 铜三级

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

AIShield Security Scanner: common questions

Is AIShield Security Scanner MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the AIShield Security Scanner safety report
How do I install AIShield Security Scanner?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does AIShield Security Scanner need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is AIShield Security Scanner maintained?
The last commit was 8 days ago (2026-10-27). The latest release is v4.3.0.
What can I use instead of AIShield Security Scanner?
Servers from other publishers that do the same job: Agent Security Scanner MCP server, Skillsmith MCP server and Shellward MCP server. Compare all AIShield Security Scanner alternatives.
How does AIShield Security Scanner compare with other AI and agents MCP servers?
safety score 92/100 (higher than 90% of 4,460 AI and agents servers); tools 6 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to AIShield Security Scanner

Same job from other publishers: the closest match first, then the best rated.

All AIShield Security Scanner alternatives →
  • Agent Security Scanner
    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
    C
  • Skillsmith
    Share agent skills across your team, scan them for risk, and track what's actually used.
    B
  • Shellward
    AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
    A
  • Claude Prompts
    Reusable prompt templates, multi-step workflow chains, and quality gates for any MCP client.
    A
  • HOL Guard
    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
    A

More from lm203688 →