ubon
Version:
Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.
14 lines • 539 B
TypeScript
import { Rule } from '../types';
/**
* AI005: Secrets inside MCP server configuration.
*
* Cursor, Claude Desktop, Windsurf and other MCP clients load their server
* list from JSON files (`.cursor/mcp.json`, `mcp.json`, `claude_desktop_config.json`,
* etc.). It is common for vibe-coders to commit these files with API keys,
* PATs or DB URLs baked into the `env` block.
*
* Detection lives in AIScanner because we need to parse the JSON shape.
*/
declare const rule: Rule;
export default rule;
//# sourceMappingURL=AI005.d.ts.map