MCPs › Security › agent-security-scanner
Security scanner MCP server that protects AI coding agents from generating vulnerable code. Features: • 275+ security rules for Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection across 4.3M+ packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku) • Prompt injection detection for AI agent security • Automatic fix suggestions for common vulnerabilities • CWE/OWASP metadata for compliance Tools: • scan_security - Scan files for vulnerabilities • fix_security - Auto-fix security issues • check_package - Verify if a package exists or is hallucinated • scan_agent_prompt - Detect prompt injection attacks • list_security_rules - View all available rules • list_package_stats - Package database statistics Zero config - works instantly with npx.
Not monetized yet
Turn agent-security-scanner’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.
Install agent-security-scanner
For anyone using agent-security-scanner — no Lulu account needednpx -y @smithery/cli@latest install prooflayer/agent-security-scanner --client claude
9 field-tested tactics as a designed playbook plus skills your coding agent can run. Free.
Get the Kit →FAQ
agent-security-scanner installs from source — follow the repository README.
Unrated out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Similar servers
Works well together