Codeinspectus

未申請

作者: Synvoya

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

ai-generated-codeai-securityappsecclaude-codecodexcursordevsecopsgitleakslocal-firstmcpmcp-serveropengrepowaspsastsecuritystatic-analysissupabasetrivytypescriptvibe-coding

インストール

$npx codeinspectus repair-engines

未申請リスティング

このMCPサーバーはあなたのものですか？

このリスティングは公開情報から自動的にインデックスされました。申請することで、ページの編集、互換性の設定、成長ツールのアンロックができます。2分以内に完了します。

このサーバーを申請する

ツール（6個）

codeinspectus_compliance_report

Per-framework code-level control coverage (not certification).

codeinspectus_explain_finding

Deep explanation + full remediation for one finding.

codeinspectus_generate_sbom

CycloneDX/SPDX SBOM using Trivy plus native Pub inventory/fallback (written to the managed dir by default, or a path you choose).

codeinspectus_list_rules

Active detectors, native-pack inventory/rule ownership, engine versions, detection-DB + Trivy/Pub DB provenance and freshness, and structured machine setup/repair state.

codeinspectus_rescan

Re-scan after fixes; diffs vs a prior scan → resolved / remaining / introduced, with fresh technology and pack coverage.

codeinspectus_scan

Full local scan of a path (engines + AI checks). Returns CWE-keyed findings, detected technologies, exact native-pack and Pub dependency coverage, remediations, framework tags, and three-state repository evidence for supported runtime controls.