Checks whether a tool, MCP server, package or skill is safe to connect and returns a signed, verifiable safety grade with reasons.
接入配置
该项目没有提供统一的启动命令，请按源码仓库的说明安装。
相关推荐
更多- SSafeDep vet MCPSafeDep官方Vets open source packages for vulnerabilities and malicious code before agents add them to a project.安全1.1k 仓库星标
- BBoost MCPBoostSecurity官方Checks packages a coding agent wants to add and blocks dependencies with known vulnerabilities, malware or typosquatting.安全15 仓库星标
- CClawSearchClawSearch官方Search engine for AI agent skills with trust scores, multilingual semantic search and supply-chain security checks.安全
- NNPMScanNPMScan官方Analyzes npm packages for vulnerabilities, malicious behavior, suspicious scripts, maintainer risk and typosquatting, without an API key.安全
- DdepguardmopancPre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, hallucinated package guard and CycloneDX SBOM.安全15 仓库星标
- PPinner MCPSafeDepPins GitHub Actions and container base images to immutable SHA hashes to help prevent supply chain attacks.安全13 仓库星标