nhomyk/mcp-scan-action
The first GitHub Action that scans MCP servers, AI agents & LLM pipelines for security vulnerabilities. 24 checks: tool poisoning, SSRF, prompt injection, DataFlow taint. Results in GitHub Security tab via SARIF. No API key required.
Platform-specific configuration:
{
"mcpServers": {
"mcp-scan-action": {
"command": "npx",
"args": [
"-y",
"mcp-scan-action"
]
}
}
}Add the config above to .claude/settings.json under the mcpServers key.
Loading reviews...