MCP injection / prompt-poisoning / SSRF scanner. 30+ canonical rules covering the April 2026
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
MCP injection / prompt-poisoning / SSRF scanner. 30+ canonical rules covering the April 2026