Security Scanner Ai MCP Server

This security scanner MCP server has several moderate concerns. The server depends on an external authentication middleware (`auth_middleware.py`) located at a user-writable path (`~/clawd/meok-labs-engine/shared`), creating a supply chain and privilege escalation risk. The authentication system relies on local file-based key storage without cryptographic verification, and there is no input validation on several tools that scan user-supplied code/configuration. While the tools themselves are read-only and the core scanning logic is sound, the authentication bypass risk and reliance on path-based module imports significantly lower confidence. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.