Skip to content

scanner-lite v1.0.0 - Lightweight MCP Security Scanner

Choose a tag to compare

View all tags
@sinewaveai sinewaveai released this 28 Feb 03:18
scanner-lite-v1.0.0
bedef24

@prooflayer/scanner-lite v1.0.0

Lightweight, MIT-licensed MCP security scanner with full OWASP Agentic Top 10 coverage.

Highlights

  • OWASP Agentic Top 10: All 418 YAML rules + 33 JS rules tagged with ASI-01 through ASI-10
  • 18 New Agent Rules: Memory poisoning, inter-agent communication, cascading failures, trust exploitation, rogue agents
  • Runtime MCP Inspector: Live JSON-RPC tool definition scanning with A-F grading
  • 311 Tests: 8 test files, 100% pass rate
  • GitHub Action Ready: Composite action + reusable workflow
  • MIT Licensed: ~104KB compressed, fully offline-capable, zero Python dependencies

Installation

npm install -g @prooflayer/scanner-lite

Quick Start

# Scan a file or directory
npx @prooflayer/scanner-lite scan ./src

# Inspect a live MCP server
npx @prooflayer/scanner-lite inspect -- node server.js

# Check package hallucination
npx @prooflayer/scanner-lite check-package rekat

Competitive Advantage

Feature scanner-lite AgentAudit-MCP
License MIT AGPL-3.0
Rules 418 YAML + 33 JS 12 regex
OWASP ASI ASI-01 through ASI-10 None
Tests 311 (100% pass) ~30
Offline Yes No
Size 104KB 230KB

What's New

  • OWASP Agentic Security Initiative complete coverage
  • Runtime MCP inspector for live tool scanning
  • 18 agent-specific detection rules
  • Critical bug fixes (regex engine, Terraform detection)
  • GitHub Action support

See CHANGELOG for full details.

Assets 2
Loading