muhannad-hash/mcp-shield

What it does

mcpshield is a security scanning tool designed to analyze MCP (Model Context Protocol) servers and npm packages for potential security vulnerabilities and malicious code. It proactively identifies threats including backdoors, data exfiltration code, obfuscation techniques, dangerous code execution patterns, prompt injection attacks, and supply chain risks before installation.

Key features

• Scan npm packages for security vulnerabilities and malicious code
• Scan local directories and codebases for threats
• Check for prompt injection vulnerabilities
• Audit supply chain risks in dependencies
• Detect obfuscated and dangerous code execution patterns
• Multi-platform support (Windows, macOS, Linux)

How to set up

Install mcpshield as an MCP server through your Claude or compatible AI interface. Add the server endpoint to your MCP configuration file, then use the four available tools to scan packages, audit directories, test for prompt injection vulnerabilities, and assess supply chain security before integrating new MCP servers into your environment.