scan_directory

24 registry entries were observed exposing a tool named scan_directory — none of them flagged as a privileged capability.

Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 12,342 of 40,590 scannable entries (30%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.

  1. supply-chain-guardMCPattestedtrust 85/100 · A
    v6.5.4
    ↓ 2k/wk
    ★ 7

    Open-source supply-chain security scanner, local and offline. Matches known-malicious packages, extensions, plugins, providers, container images and CI actions in 15 ecosystems, including transitive lockfile dependencies at any depth, and detects GlassWor

    ClaudeCursorCopilotGemini
    ElvatisApache-2.01d agonpmGitHubobserved · static extraction
    securitysupply-chainmalware-detectionnpmpypicargo
  2. @guardbee/mcp-secret-scannerMCPattestedtrust 85/100 · A
    v0.3.0
    ↓ 637/wk
    ★ 1

    Scans files for leaked secrets and API keys

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  3. @guardbee/mcp-toxic-flow-auditorMCPattestedtrust 85/100 · A
    v0.1.14
    ↓ 530/wk
    ★ 1

    Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  4. @guardbee/mcp-prompt-injection-scannerMCPattestedtrust 85/100 · A
    v0.2.11
    ↓ 497/wk
    ★ 1

    Scans RAG content/scraped pages for indirect prompt injection

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  5. @guardbee/security-suiteMCPattestedtrust 85/100 · A
    v0.2.4
    ↓ 105/wk
    ★ 1

    Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  6. @guardbee/mcp-server-auditorMCPattestedtrust 85/100 · A
    v0.1.8
    ↓ 73/wk
    ★ 1

    Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  7. @guardbee/mcp-oauth-auditorMCPattestedtrust 85/100 · A
    v0.1.5
    ↓ 67/wk
    ★ 1

    Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  8. @guardbee/mcp-prompt-leak-scannerMCPattestedtrust 65/100 · B
    v0.1.15
    ↓ 551/wk
    ★ 1

    Catches leaked credentials and PII in outbound LLM prompts

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  9. @guardbee/mcp-tool-poisoning-scannerMCPattestedtrust 65/100 · B
    v0.2.6
    ↓ 63/wk
    ★ 1

    Scans MCP tool definitions for hidden instructions and confused-deputy sinks

    ClaudeCursorCopilotGemini
    io.github.GuardBeeMIT3d agonpmGitHubobserved · static extraction
    mcp
  10. @guardbee/mcp-config-auditorMCPcommunitytrust 60/100 · B
    v0.3.1
    ↓ 104/wk
    ★ 1

    Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  11. @guardbee/mcp-elicitation-auditorMCPcommunitytrust 60/100 · B
    v0.1.1
    ↓ 90/wk
    ★ 1

    MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT12d agonpmGitHubobserved · static extraction
    mcp
  12. @guardbee/mcp-memory-poisoning-scannerMCPcommunitytrust 60/100 · B
    v0.1.2
    ↓ 73/wk
    ★ 1

    Scans agent code for untrusted input poisoning persistent cross-session memory

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  13. @guardbee/mcp-agent-graph-auditorMCPcommunitytrust 60/100 · B
    v0.1.2
    ↓ 72/wk
    ★ 1

    Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  14. @guardbee/mcp-ai-code-scannerMCPcommunitytrust 60/100 · B
    v0.3.2
    ↓ 69/wk
    ★ 1

    Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  15. @guardbee/mcp-unbounded-consumption-auditorMCPcommunitytrust 60/100 · B
    v0.1.2
    ↓ 64/wk
    ★ 1

    Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  16. @guardbee/mcp-model-scannerMCPcommunitytrust 60/100 · B
    v0.1.2
    ↓ 59/wk
    ★ 1

    Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  17. @guardbee/mcp-slopsquat-scannerMCPcommunitytrust 60/100 · B
    v0.1.1
    ↓ 57/wk
    ★ 1

    Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  18. @guardbee/mcp-a2a-auditorMCPcommunitytrust 60/100 · B
    v0.1.1
    ↓ 56/wk
    ★ 1

    Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

    ClaudeCursorCopilotGemini
    io.github.4hmetuyarMIT14d agonpmGitHubobserved · static extraction
    mcp
  19. guardvibeMCPcommunitytrust 60/100 · B
    v3.55.0
    ★ 5

    Deterministic security layer your AI can't be. 574 rules, 39 tools, CLI + doctor + host audit.

    ClaudeCursorCopilotGemini
    io.github.goklabApache-2.02d agonpmGitHubobserved · static extraction
    mcp
  20. io.github.Aakashbhardwaj27/ai-scannerMCPcommunitytrust 60/100 · B
    v1.0.6
    ★ 1

    Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

    ClaudeCursorCopilotGemini
    io.github.Aakashbhardwaj27Unknown6mo agonpmGitHubobserved · static extraction
    mcp
  21. io.github.digidenone/synapse-auditMCPcommunitytrust 60/100 · B
    v3.0.0
    ★ 1

    AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

    ClaudeCursorCopilotGemini
    io.github.digidenoneUnknown9mo agonpmGitHubobserved · static extraction
    mcp
  22. io.github.andysalvo/supership-scanMCPcommunitytrust 60/100 · B
    v2.0.2

    Buy any x402 API or data on Base, Solana, Polygon. No wallet on the seller's chain. For AI agents.

    ClaudeCursorCopilotGemini
    io.github.andysalvoUnknown4mo agonpmGitHubobserved · static extraction
    mcp
  23. io.github.lazymac2x/mcpwatchMCPcommunitytrust 60/100 · B
    v0.1.1

    Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.

    ClaudeCursorCopilotGemini
    io.github.lazymac2xUnknown6mo agonpmGitHubobserved · static extraction
    mcp
  24. io.github.goldmembrane/codesaferMCPcommunitytrust 40/100 · C
    v1.0.1
    ★ 1

    Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.

    ClaudeCursorCopilotGemini
    io.github.goldmembraneUnknown6mo agonpmGitHubobserved · static extraction
    mcp

All indexed toolsSearch the registry for scan_directory