Scans MCP servers for prompt-injection, tool-poisoning, SSRF, and related static-pattern risks tied to April 2026 MCP disclosures. It can fetch a server's tool listing or audit a pasted JSON tool list and produce a severity-ranked report.
From the registry: MCP injection / prompt-poisoning / SSRF scanner. 30+ canonical rules covering the April 2026
No canonical install info was extracted for this server. Check the repository README directly.
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.