UNPKG

vibe-guard

Version:

██ Vibe-Guard Security Scanner - 28 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere, optimized performance. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, contain

40 lines 1.5 kB
import { BaseRule, FileContent, SecurityIssue } from '../types'; export declare class McpServerSecurityRule extends BaseRule { readonly name = "mcp-server-security"; readonly description = "Detects insecure Model Context Protocol (MCP) server configurations with context-aware analysis"; readonly severity: "high"; private readonly insecurePatterns; private readonly mcpContextPatterns; private readonly configurationPatterns; private readonly safePatterns; check(fileContent: FileContent): SecurityIssue[]; private analyzeContext; private isSafeContext; private detectLanguage; private detectFramework; private detectConfigurationType; private hasMcpContext; private isInComment; private isInString; private isInConfiguration; private isInTestFile; private isInDocumentation; private validateAccessControl; private validateDisabledSecurity; private validateDisabledAuth; private validateOpenCors; private validateWeakCredentials; private validateDisabledEncryption; private validateInsecureBinding; private validateExcessiveLogging; private validateNoRateLimit; private validatePathTraversal; private validateLocalBinding; private validateMcpServerEnabled; private validateShortContextPath; private determineSeverity; private isDevelopmentContext; private isTestFile; private getRemediationMessage; } //# sourceMappingURL=mcp-server-security.d.ts.map