- Add medusa/core/fp_filter.py module for false positive reduction
- Detect security wrapper patterns (SecureString, SecureCredential, etc.)
- Filter docstring/comment-based credential keyword matches
- Context-aware security module detection
- TypeScript/JavaScript pattern support alongside Python
- Integrate FP filter into parallel scan pipeline
- Add fp_analysis metadata to scan findings
Tested on telegram-mcp-secure and notebooklm-mcp-secure projects:
- Successfully filters security module FPs
- Correctly retains real security findings
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>