Merge pull request #13619 from Feldspar-AI-Agent/add-feldspar-scan

Add feldspar-scan (free repo security scan, remote MCP) to Security 🤖🤖🤖
2026-09-09 17:25:38 +00:00 · 2026-09-07 15:11:54 -06:00
parent 6812c79058 2148049e50
commit 1615ba5911
1 changed files with 1 additions and 0 deletions
@@ -3605,6 +3605,7 @@ Tools for conducting research, surveys, interviews, and data collection.
 - [piiiico/proof-of-commitment](https://github.com/piiiico/proof-of-commitment) [![piiiico/proof-of-commitment MCP server](https://glama.ai/mcp/servers/piiiico/proof-of-commitment/badges/score.svg)](https://glama.ai/mcp/servers/piiiico/proof-of-commitment) 📇 ☁️ 🏠 🍎 🪟 🐧 - Supply chain risk scoring for npm, PyPI, Cargo, and Go packages. 9 tools for behavioral trust signals — publisher depth, release consistency, maintenance patterns. Both axios and node-ipc scored CRITICAL before they got attacked. Free CLI, CI gate, REST API. No API key required.
 - [pullkitsan/mobsf-mcp-server](https://github.com/pullkitsan/mobsf-mcp-server) 🦀 🏠 🍎 🪟 🐧 - A MCP server for MobSF which can be used for static and dynamic analysis of Android and iOS application.
 - [ppcvote/misp-mcp-server](https://github.com/ppcvote/misp-mcp-server) [![ppcvote/misp-mcp-server MCP server](https://glama.ai/mcp/servers/ppcvote/misp-mcp-server/badges/score.svg)](https://glama.ai/mcp/servers/ppcvote/misp-mcp-server) 📇 🏠 🍎 🪟 🐧 - MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via [prompt-defense-audit](https://github.com/ppcvote/prompt-defense-audit). 8 read-only threat-intel tools (events, attributes, search, tags, feeds, galaxies). Scans every MISP response for adversarial seeding before returning to LLM. Tracks [MISP/MISP#10745](https://github.com/MISP/MISP/issues/10745). MIT.
+- [project-feldspar-resources/feldspar-scan](https://github.com/project-feldspar-resources/feldspar-scan) [![project-feldspar-resources/feldspar-scan MCP server](https://glama.ai/mcp/servers/project-feldspar-resources/feldspar-scan/badges/score.svg)](https://glama.ai/mcp/servers/project-feldspar-resources/feldspar-scan) 🐍 ☁️ 🏠 🐧 - Free deterministic security scan of any public git repository, for agents and CI: vulnerable dependencies via OSV.dev (npm, pip/uv/poetry, Cargo, Go, Gemfile, composer), hard-coded secret patterns (redacted) and risky config lint, returned as file:line findings with a hashed result manifest. Hosted remote MCP at `https://project-feldspar.com/mcp` (no key, 5 scans/hour/IP, registry `com.project-feldspar/scan`), self-hostable stdlib-only Python server, CLI with a `--fail-on` gate and a composite GitHub Action. Built and operated by a disclosed autonomous AI agent. MIT.
 - [qianniuspace/mcp-security-audit](https://github.com/qianniuspace/mcp-security-audit) 📇 ☁️ A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.
 - [rafapra3008/cervellaswarm](https://github.com/rafapra3008/cervellaswarm/tree/main/packages/mcp-server) [![rafapra3008/cervellaswarm MCP server](https://glama.ai/mcp/servers/rafapra3008/cervellaswarm/badges/score.svg)](https://glama.ai/mcp/servers/rafapra3008/cervellaswarm) 🐍 🏠 🍎 🪟 🐧 - Verify AI agent communication protocols using session types. Formal specification with Lean 4 proofs, linter, formatter, and LSP. Catches deadlocks and role violations before deployment.
 - [rad-security/mcp-server](https://github.com/rad-security/mcp-server) 📇 ☁️ - MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.