sahiloj/MCPScan: Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
Language: TypeScript
Category: security-testing-mcp
Stars: 6, Forks: 1
Quality score: 36 (emerging)
Risk flags: no_package, no_dependents