io.github.GuardBee/tool-poisoning-scanner

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

Source

Official Registry

Updated

2026-10-15

// securityCaution

Runs locally
Official / curated
Open source
Community-trusted

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.GuardBee/tool-poisoning-scanner" MCP server from askskill:
Run: claude mcp add 'io-github-guardbee-tool-poisoning-scanner' -- npx -y @guardbee/mcp-tool-poisoning-scanner

// docs

No documentation provided

Check the source repo for usage and examples.

Go to source repo ↗

// from the same source

MCP

io.github.GuardBee/owasp-scan

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

—Get→

MCP

io.github.4hmetuyar/a2a-auditor

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

—Get→

MCP

io.github.4hmetuyar/agent-graph-auditor

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

—Get→

MCP

io.github.4hmetuyar/ai-code-scanner

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

—Get→

MCP

io.github.4hmetuyar/compliance-checker

KVKK/GDPR/CCPA compliance checks for codebases

—Get→

MCP

io.github.GuardBee/mcp-config-auditor

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

—Get→

$ loading_