ghchinoy/mcp-security

v1.0.0Apache-2.0

Model Context Protocol (MCP) security auditing for RCE, STDIO injection, and supply chain vulnerabilities.

Audits local Model Context Protocol (MCP) server configurations and custom-built MCP servers for Remote Command Execution (RCE) and supply chain vulnerabilities, specifically focusing on STDIO transport injection and malicious prompt injection. Use when auditing MCP server configs, reviewing MCP server source code, or conducting a security review of AI IDE extensions.