Verify a vuln report's file/line/function claims against a real GitHub repo.
Score is being calculated.
Check a vulnerability report's concrete claims (file paths, file:line references, function names) against a real public GitHub repo's current contents. Flags claims that don't check out -- the file doesn't exist, the line is past EOF, the function isn't in the file -- which is the most common signature of an AI-generated fabricated vuln report. Does not judge whether a real, verifiable claim describes an actual security bug; it only checks whether the claim is honest about the codebase.
| Name | Required | Description | Default |
|---|---|---|---|
| repo | Yes | A github.com/owner/name URL for the public repo being reported against | |
| report | Yes | The full text of the vulnerability report to check |
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
verify_vulnerability_reportVerify a vuln report's file/line/function claims against a real GitHub repo.
Independent static verification for exact immutable public GitHub commits.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.
Add one secure layer between your agents and this server.