Security audit
Security checks for vulnerabilities and agentic risk
This is a user-run security scanner that reads files in a chosen directory and reports findings without network access, persistence, or hidden changes.
Install only if you are comfortable with a local scanner reading source and configuration files under the directory you choose. Run it on the specific MCP server or skill folder you want audited, not on your home directory or unrelated private workspaces.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
}
# Scan all relevant files
extensions = ['.py', '.js', '.ts', '.json', '.yaml', '.yml', '.txt', '.md', '.env', '.config', '.conf']
files_to_scan = []
for ext in extensions:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
}
# Scan all relevant files
extensions = ['.py', '.js', '.ts', '.json', '.yaml', '.yml', '.txt', '.md', '.env', '.config', '.conf']
files_to_scan = []
for ext in extensions:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
files_to_scan.extend(self.mcp_path.rglob(f"*{ext}"))
# Also check for common config files
common_files = ['.env', '.env.local', '.env.production', 'docker-compose.yml', 'Dockerfile']
for cf in common_files:
files_to_scan.extend(self.mcp_path.rglob(cf))
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
files_to_scan.extend(self.mcp_path.rglob(f"*{ext}"))
# Also check for common config files
common_files = ['.env', '.env.local', '.env.production', 'docker-compose.yml', 'Dockerfile']
for cf in common_files:
files_to_scan.extend(self.mcp_path.rglob(cf))
This code recursively enumerates and reads files under a user-supplied path, which can expose user or system data during execution. Although this is part of an auditor's purpose, the file contains no explicit user-facing disclosure, prompt, or warning in comments/docstrings about scanning file contents across the directory tree.
The code comment and field name indicate that the report is including a timestamp, but L255 stores str(Path().cwd()), which is the current working directory path rather than any time value. This is an active contradiction between the documented intent of the metadata field and the implemented behavior.
All CLI usage, report headings, summaries, and recommendations are emitted only in English, with no option for user locale selection or opt-in. Under the language/locale policy, hard-coding a specific language for user-facing interaction can be a policy violation when no choice is offered.