github TypeScript re-analysis due

AGGIB/Stroq

github

Local action firewall for AI coding agents: scans what the agent reads, taints the session, blocks dangerous follow-up actions

maintainer
AGGIB
licence
Apache-2.0
first seen
2026-09-04
last seen
2026-09-15
releases · 30d
11
short id

AGGIB/Stroq is an MCP server distributed on github, maintained by AGGIB, tracked here since September 2026. It has shipped 11 releases. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and hidden prompt content — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem and shell / exec, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 11 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
v0.10.1 2026-09-09 github
v0.10.0 2026-09-08 github
v0.9.0 2026-09-07 github
v0.8.0 2026-09-06 github
v0.7.0 2026-09-06 github
v0.6.0 2026-09-06 github
v0.5.0 2026-09-05 github
v0.4.0 2026-09-05 github
v0.3.0 2026-09-04 github
v0.2.0 2026-09-04 github

view all →