yof
OfficialRelated Servers
Alternatives to yof
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityBmaintenanceEnables MCP-compatible AI agents to scan code for leaked secrets, copyleft licenses, unprotected routes, missing privacy policies, and risky card handling before committing or shipping.86 npmMIT
- AlicenseCqualityDmaintenanceSecurity scanner and MCP server that catches dangerous patterns in MCP servers and AI agent projects, such as leaked secrets, shell execution, and prompt-injection text. Runs as both a CLI and MCP server with CI-friendly severity gates.21MIT
- AlicenseBqualityBmaintenanceSecurity MCP server with 300+ rules for AI-generated code. Scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL and 20+ modules. Zero config, runs locally.392,157 npm6Apache 2.0
- AlicenseNot gradedqualityDmaintenanceRuntime safety guardrails for AI coding agents. Checks file access, validates shell commands, and scores your repo's AI safety — all via MCP.8 npm8MIT
- AlicenseNot gradedqualityCmaintenanceSecurity scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cross-server exfil chains no single server reveals. Zero-dependency local CLI, SARIF output, CI-gateable, no account.63 npmMIT
- AlicenseNot gradedqualityDmaintenanceSecurity scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs with A-F security grades.MIT
TDQS
Scored across 8 tools
Each tool has a sharply distinct role: yof_check (full scan), yof_check_diff (changed lines only), and yof_verify (single file re-check) are explicitly separated by scope, and yof_findings is explicitly stated not to scan locally. yof_explain (rule background) vs yof_fix_prompt (step-by-step fix) vs yof_verify (post-fix confirmation) are also cleanly differentiated, as are yof_patch_status (open PRs) and yof_lessons (merged fixes).
Every tool uses the same yof_ prefix plus a lowercase snake_case noun/verb phrase, with no camelCase or style drift. The check/check_diff, patch_status/lessons, and explain/fix_prompt pairs read as a predictable family.
Eight tools is well-scoped for a scan-diagnose-fix-verify lifecycle, and each tool earns its place by covering a distinct step. Nothing feels redundant or padded.
The surface covers scanning (full, diff, single-file), explanation, fix instructions, verification, cloud findings, and Patch PR/lesson tracking, which is a coherent lifecycle. Minor gaps exist: there is no tool to dismiss/ignore a finding, initialize or edit .yof.yml config, or trigger Patch to open a fix PR, so a few lifecycle steps end in a dead end.