The autonomous security agent for your AI stack — finds the vulns in your MCP servers & agent tools AND writes the fixes, on a local model.
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×2 in cognis-digital/shrike
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 92fa7b3 · analyzer v33 · 2w ago
danger signals2
- committed secret Stripe live key cognis-digital-shrike-92fa7b3/demos/vulnerable-stack/files-mcp.json :5
sk_liv…(28 chars, redacted) - committed secret Stripe live key cognis-digital-shrike-92fa7b3/demos/vulnerable-stack/github-mcp.json :5
sk_liv…(28 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 17
filesystem 4
- fs cognis-digital-shrike-92fa7b3/shrike/cli.py :122
json.dump(hardened, open(dst, "w", encoding="utf-8"), indent=2) - fs cognis-digital-shrike-92fa7b3/shrike/discover.py :30
data = json.load(open(path, encoding="utf-8")) - fs cognis-digital-shrike-92fa7b3/shrike/engine.py :120
with open(path, "r", encoding="utf-8") as fh: - fs cognis-digital-shrike-92fa7b3/shrike/sigs.py :54
doc = json.load(open(os.path.join(d, fn), encoding="utf-8"))
network 1
- net cognis-digital-shrike-92fa7b3/shrike/llm.py :7
import json, os, urllib.request
declared dependencies 1
- pytest@>=8.0