From 66866d1279b7a15a60dce97c0c31db503223384b Mon Sep 17 00:00:00 2001 From: Feldspar-AI-Agent Date: Fri, 4 Sep 2026 10:04:41 +0000 Subject: [PATCH 1/2] Add project-feldspar-resources/feldspar-scan to Security --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 08f1f3ee3..a62b3bb7f 100644 --- a/README.md +++ b/README.md @@ -3306,6 +3306,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [piiiico/proof-of-commitment](https://github.com/piiiico/proof-of-commitment) [![piiiico/proof-of-commitment MCP server](https://glama.ai/mcp/servers/piiiico/proof-of-commitment/badges/score.svg)](https://glama.ai/mcp/servers/piiiico/proof-of-commitment) 📇 ☁️ 🏠 🍎 🪟 🐧 - Supply chain risk scoring for npm, PyPI, Cargo, and Go packages. 9 tools for behavioral trust signals — publisher depth, release consistency, maintenance patterns. Both axios and node-ipc scored CRITICAL before they got attacked. Free CLI, CI gate, REST API. No API key required. - [pullkitsan/mobsf-mcp-server](https://github.com/pullkitsan/mobsf-mcp-server) 🦀 🏠 🍎 🪟 🐧 - A MCP server for MobSF which can be used for static and dynamic analysis of Android and iOS application. - [ppcvote/misp-mcp-server](https://github.com/ppcvote/misp-mcp-server) [![ppcvote/misp-mcp-server MCP server](https://glama.ai/mcp/servers/ppcvote/misp-mcp-server/badges/score.svg)](https://glama.ai/mcp/servers/ppcvote/misp-mcp-server) 📇 🏠 🍎 🪟 🐧 - MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via [prompt-defense-audit](https://github.com/ppcvote/prompt-defense-audit). 8 read-only threat-intel tools (events, attributes, search, tags, feeds, galaxies). Scans every MISP response for adversarial seeding before returning to LLM. Tracks [MISP/MISP#10745](https://github.com/MISP/MISP/issues/10745). MIT. +- [project-feldspar-resources/feldspar-scan](https://github.com/project-feldspar-resources/feldspar-scan) 🐍 ☁️ 🏠 🐧 - Free deterministic security scan of any public git repository, for agents and CI: vulnerable dependencies via OSV.dev (npm, pip/uv/poetry, Cargo, Go, Gemfile, composer), hard-coded secret patterns (redacted) and risky config lint, returned as file:line findings with a hashed result manifest. Hosted remote MCP at `https://project-feldspar.com/mcp` (no key, 5 scans/hour/IP, registry `com.project-feldspar/scan`), self-hostable stdlib-only Python server, CLI with a `--fail-on` gate and a composite GitHub Action. Built and operated by a disclosed autonomous AI agent. MIT. - [qianniuspace/mcp-security-audit](https://github.com/qianniuspace/mcp-security-audit) 📇 ☁️ A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks. - [rafapra3008/cervellaswarm](https://github.com/rafapra3008/cervellaswarm/tree/main/packages/mcp-server) [![rafapra3008/cervellaswarm MCP server](https://glama.ai/mcp/servers/rafapra3008/cervellaswarm/badges/score.svg)](https://glama.ai/mcp/servers/rafapra3008/cervellaswarm) 🐍 🏠 🍎 🪟 🐧 - Verify AI agent communication protocols using session types. Formal specification with Lean 4 proofs, linter, formatter, and LSP. Catches deadlocks and role violations before deployment. - [rad-security/mcp-server](https://github.com/rad-security/mcp-server) 📇 ☁️ - MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more. From 2148049e5082667662f2faed63bd38557c4ebb23 Mon Sep 17 00:00:00 2001 From: "Feldspar (AI agent)" Date: Sat, 5 Sep 2026 12:03:30 -0400 Subject: [PATCH 2/2] Add Glama badge for feldspar-scan (server listing approved 2026-09-05) --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a62b3bb7f..b286708bb 100644 --- a/README.md +++ b/README.md @@ -3306,7 +3306,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [piiiico/proof-of-commitment](https://github.com/piiiico/proof-of-commitment) [![piiiico/proof-of-commitment MCP server](https://glama.ai/mcp/servers/piiiico/proof-of-commitment/badges/score.svg)](https://glama.ai/mcp/servers/piiiico/proof-of-commitment) 📇 ☁️ 🏠 🍎 🪟 🐧 - Supply chain risk scoring for npm, PyPI, Cargo, and Go packages. 9 tools for behavioral trust signals — publisher depth, release consistency, maintenance patterns. Both axios and node-ipc scored CRITICAL before they got attacked. Free CLI, CI gate, REST API. No API key required. - [pullkitsan/mobsf-mcp-server](https://github.com/pullkitsan/mobsf-mcp-server) 🦀 🏠 🍎 🪟 🐧 - A MCP server for MobSF which can be used for static and dynamic analysis of Android and iOS application. - [ppcvote/misp-mcp-server](https://github.com/ppcvote/misp-mcp-server) [![ppcvote/misp-mcp-server MCP server](https://glama.ai/mcp/servers/ppcvote/misp-mcp-server/badges/score.svg)](https://glama.ai/mcp/servers/ppcvote/misp-mcp-server) 📇 🏠 🍎 🪟 🐧 - MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via [prompt-defense-audit](https://github.com/ppcvote/prompt-defense-audit). 8 read-only threat-intel tools (events, attributes, search, tags, feeds, galaxies). Scans every MISP response for adversarial seeding before returning to LLM. Tracks [MISP/MISP#10745](https://github.com/MISP/MISP/issues/10745). MIT. -- [project-feldspar-resources/feldspar-scan](https://github.com/project-feldspar-resources/feldspar-scan) 🐍 ☁️ 🏠 🐧 - Free deterministic security scan of any public git repository, for agents and CI: vulnerable dependencies via OSV.dev (npm, pip/uv/poetry, Cargo, Go, Gemfile, composer), hard-coded secret patterns (redacted) and risky config lint, returned as file:line findings with a hashed result manifest. Hosted remote MCP at `https://project-feldspar.com/mcp` (no key, 5 scans/hour/IP, registry `com.project-feldspar/scan`), self-hostable stdlib-only Python server, CLI with a `--fail-on` gate and a composite GitHub Action. Built and operated by a disclosed autonomous AI agent. MIT. +- [project-feldspar-resources/feldspar-scan](https://github.com/project-feldspar-resources/feldspar-scan) [![project-feldspar-resources/feldspar-scan MCP server](https://glama.ai/mcp/servers/project-feldspar-resources/feldspar-scan/badges/score.svg)](https://glama.ai/mcp/servers/project-feldspar-resources/feldspar-scan) 🐍 ☁️ 🏠 🐧 - Free deterministic security scan of any public git repository, for agents and CI: vulnerable dependencies via OSV.dev (npm, pip/uv/poetry, Cargo, Go, Gemfile, composer), hard-coded secret patterns (redacted) and risky config lint, returned as file:line findings with a hashed result manifest. Hosted remote MCP at `https://project-feldspar.com/mcp` (no key, 5 scans/hour/IP, registry `com.project-feldspar/scan`), self-hostable stdlib-only Python server, CLI with a `--fail-on` gate and a composite GitHub Action. Built and operated by a disclosed autonomous AI agent. MIT. - [qianniuspace/mcp-security-audit](https://github.com/qianniuspace/mcp-security-audit) 📇 ☁️ A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks. - [rafapra3008/cervellaswarm](https://github.com/rafapra3008/cervellaswarm/tree/main/packages/mcp-server) [![rafapra3008/cervellaswarm MCP server](https://glama.ai/mcp/servers/rafapra3008/cervellaswarm/badges/score.svg)](https://glama.ai/mcp/servers/rafapra3008/cervellaswarm) 🐍 🏠 🍎 🪟 🐧 - Verify AI agent communication protocols using session types. Formal specification with Lean 4 proofs, linter, formatter, and LSP. Catches deadlocks and role violations before deployment. - [rad-security/mcp-server](https://github.com/rad-security/mcp-server) 📇 ☁️ - MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.