Vets open source packages for vulnerabilities and malicious code before agents add them to a project.
接入配置
该项目没有提供统一的启动命令，请按源码仓库的说明安装。
相关推荐
更多- BBoost MCPBoostSecurity官方Checks packages a coding agent wants to add and blocks dependencies with known vulnerabilities, malware or typosquatting.安全15 仓库星标
- NNPMScanNPMScan官方Analyzes npm packages for vulnerabilities, malicious behavior, suspicious scripts, maintainer risk and typosquatting, without an API key.安全
- AAgentAvowAgentAvow官方Checks whether a tool, MCP server, package or skill is safe to connect and returns a signed, verifiable safety grade with reasons.安全5 仓库星标
- CClawSearchClawSearch官方Search engine for AI agent skills with trust scores, multilingual semantic search and supply-chain security checks.安全
- DdepguardmopancPre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, hallucinated package guard and CycloneDX SBOM.安全15 仓库星标
- PPinner MCPSafeDepPins GitHub Actions and container base images to immutable SHA hashes to help prevent supply chain attacks.安全13 仓库星标