Install payload
Install payload is broadly covered in current results.
80% (8/10)
Browse the directory
/
Showing 10 resources for "vulnerabilities"
Saved
/ search · [ ] view density · esc clear input
Active
9 review · 1 limited in this set — compare to see which signals differ.
Trust snapshot
10 results in this view
Claimed
0%(0/10)
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Most at-risk entries in this view
Adoption queue
Browse adoption queue · balanced
3/10 visible results are in hold tier and need mitigation before adoption.
ready 0caution 7hold 3
CVE MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/cve-mcp-server · trust review · confidence 67%
Dependency Security Audit
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/dependency-security-audit-on-stop · trust review · confidence 67%
Docker Image Security Scanner - Hooks
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/docker-image-security-scanner · trust review · confidence 67%
Dynatrace MCP Server for Claude
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/dynatrace-mcp-server · trust review · confidence 67%
Package Vulnerability Scanner - Hooks
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/package-vulnerability-scanner · trust review · confidence 67%
Secure Claude Code Workstation
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
collections/secure-claude-code-workstation · trust review · confidence 67%
Semgrep MCP Server for Claude
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/semgrep-mcp-server · trust review · confidence 67%
AI Code Review Security Agent - Agents
1 blockers: Metadata review
hold
42/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/ai-code-review-security-agent · trust limited · confidence 67%
Decision confidence
Decision confidence scan · balanced
2/10 results are low-confidence and need review before adoption.
high 0medium 8low 2
CVE MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/cve-mcp-server · trust review
Dependency Security Audit
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/dependency-security-audit-on-stop · trust review
Docker Image Security Scanner - Hooks
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/docker-image-security-scanner · trust review
Dynatrace MCP Server for Claude
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/dynatrace-mcp-server · trust review
Package Vulnerability Scanner - Hooks
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/package-vulnerability-scanner · trust review
Secure Claude Code Workstation
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
collections/secure-claude-code-workstation · trust review
Semgrep MCP Server for Claude
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/semgrep-mcp-server · trust review
AI Code Review Security Agent - Agents
Address Metadata review, Package integrity before broader rollout.
medium
48/100
Missing: Metadata reviewMissing: Package integrity
agents/ai-code-review-security-agent · trust limited
Freshness distribution
40% of this view is aging or stale
Median age 54 days; 6 fresh of 10 scanned. Re-verify the oldest entries.
Theme distribution
Results center on security
90% of this view shares the top theme. Leading themes: security, vulnerabilities, dependencies.
- security90% (9)
- vulnerabilities30% (3)
- dependencies20% (2)
- developer-tools20% (2)
- kubernetes20% (2)
- vulnerability20% (2)
- ai10% (1)
- apm10% (1)
34 distinct themes across 10 scanned
Connect Claude to Semgrep — scan code for security vulnerabilities, run custom rules, inspect the AST, and pull AppSec Platform findings — with the official Semgrep Model Context Protocol server.
Grypeby Anchore · submitted by oktofeesh1
Apache-2.0 vulnerability scanner from Anchore for container images, filesystems, archives, SBOMs, PURLs, and CPEs, with risk scoring, VEX filtering, and CI-friendly output.
AI-powered code review specialist focusing on security vulnerabilities, OWASP Top 10, static analysis, secrets detection, and automated security best practices enforcement
Scans for security vulnerabilities when package.json or requirements.txt files are modified.
A Stop hook that runs npm audit, pip-audit, safety, or bundler-audit automatically at the end of every Claude Code session, detecting CVEs and outdated packages across Node.js, Python, and Ruby projects.
Connect Claude to Dynatrace observability data — run DQL queries, investigate problems and vulnerabilities, analyze Kubernetes events, forecast timeseries, and resolve entity names — with the official Dynatrace open-source MCP server.
CVE MCP Serverby Mahipal Jangra · submitted by oktofeesh1
Security intelligence MCP server that lets Claude look up CVEs, EPSS scores, CISA KEV status, OSV package vulnerabilities, exploit indicators, MITRE mappings, IP reputation, passive DNS, Shodan host data, malware intelligence, URL safety, and risk reports across optional third-party APIs.
Kubescapeby Kubescape · submitted by oktofeesh1
Apache-2.0 CNCF-incubating Kubernetes security platform and CLI for scanning clusters, manifests, Helm charts, Kustomize projects, Git repositories, and container images for misconfigurations, compliance gaps, and vulnerabilities.
A defense-in-depth bundle for hardening an agentic Claude Code workstation: block secrets and sensitive data before they are written, verify dependency provenance and known vulnerabilities, review supply-chain risk and run code security audits, and harden MCP tool access against prompt injection.
Comprehensive Docker image vulnerability scanning with layer analysis, base image recommendations, and security best practices enforcement. This PostToolUse hook automatically scans Docker images for vulnerabilities when Dockerfiles are modified, providing real-time security validation during development.