SecureAI-Scan
SecureAI-Scan is an open-source (MIT) static analysis scanner for TypeScript, JavaScript and Python code that calls LLMs or serves MCP tools. It finds prompt injection, sensitive data in prompts and logs, unsafe handling of model output, MCP tool-argument command injection and path traversal, tool poisoning, RAG and vector-store weaknesses, and Agent Skill poisoning. Each finding […]
