"AWS Secrets Manager" matching MCP connectors:

Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.

Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

Audits any MCP server for command injection, path traversal, missing auth, hardcoded secrets, SQL injection, SSRF and tool poisoning. Returns grade A-F with CVE references. Malicious servers flagged network-wide after audit. Now with shared learning brain.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.