MCP connectors by io.github.tylerscomic-lab

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

Static analysis for Pine Script v6 strategies — catches backtest-vs-live divergence traps.

Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites.

Audits MCP tool definitions for patterns that make models call tools wrong or mis-fill args.