MCP connectors by io.github.tylerscomic-lab

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.

Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites.