Repository navigation
SpiderShield v1.0
First Marketplace release of the SpiderShield GitHub Action.
Features
- Static security analysis for MCP servers (tool poisoning, prompt injection, SSRF, etc.)
- Trust Registry lookup via SpiderRating API (grade + score + verdict)
- PR gate — fail CI if score below threshold or grade worse than specified
- Auto PR comment with scan results and badge
- Badge URL output for README embedding
Usage
- uses: teehooai/spidershield@v1
with:
fail-on: DFree for all public repositories.