「Security Audit」搜索结果 — MCP 与 Agent Skill

面向 AI 智能体的 HTTP 头安全分析 API。分析任意 URL 的响应头：HSTS、Content-Security-Policy、X-Frame-Options、Referrer-Policy、Permissions-Policy、服务器识别与缓存配置，并给出 0-100 的安全评分。工具：network_analyze_headers。适用于安全审计、网站加固或合规检查。注意：综合可信度评分请用 trust_score_evaluate，仅查 SSL 请用 security_check_ssl。返回：{score, headers[], missing[], server}。无需 API 密钥——在 Base L2 上以 x402 微支付 $0.001/次。

streamable-http

在 smithery 查看

SkillAudit

MCP Serversmithery4.3k

io.smithery.megamind-0x.skillaudit

Security scanner for AI agent skills and MCP servers. Detects credential theft, data exfiltration, prompt injection, obfuscated code, and 80+ threat patterns. Free API + CLI (npx skillaudit). Premium deep scans via x402 micropayments.

streamable-http

在 smithery 查看

邮件送达率审计 —— SPF/DKIM/DMARC 检查

MCP Serversmithery3.8k

io.smithery.axel-belfort.email-deliverability

面向 AI 智能体的邮件送达能力审计 API。分析任意域名的邮件身份验证：SPF 记录校验、DKIM 选择器检查、DMARC 策略分析、MX 记录健康度，并给出 0-100 的综合送达评分与按优先级排列的修复建议。工具：email_audit_deliverability。用于审计邮件基础设施、排查投递问题或在批量发送前检查域名信誉。注意：此项检查的是域名配置，单个邮箱有效性校验请改用 email_verify_address。返回：{score, spf, dkim, dmarc, mx, recommendations[]}。无需 API 密钥——在 Base L2 上以 x402 微支付 $0.005/次。

streamable-http

在 smithery 查看

Web Auditor 网站审计

MCP Serversmithery3.8k

io.smithery.yakenator.web-inspector

分析单个网页乃至整站在 SEO、可访问性、性能与安全合规方面的表现。生成详细报告与可执行的问题清单，改善站点质量与用户体验。可跟踪历史审计数据，在多次抓取之间监测改进情况。

streamable-http

在 smithery 查看

middleBrick | API-Security

MCP Serversmithery2.9k

io.smithery.middlebrick.api-security

Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.

streamable-http

在 smithery 查看

Compuute MCP Security Scanner

MCP Serversmithery1.6k

io.smithery.daniel-abbay.compuute-scan-api

Static security scanner for MCP servers. POST a public GitHub URL, get severity counts, a score, and the top findings with file+line back. 37 rules across TypeScript, JavaScript, Python, Go, Rust, C#, Java, and Kotlin — every language with an official MCP SDK. Detects argument injection for npx/uvx/pipx/pnpx runner binaries (CWE-88), known CVEs in 40+ top packages, and the usual L0 discovery (transport, tool inventory, dependency pinning). This is a pattern detector, not an exploitability oracle. Around 90% raw false-positive rate on unfiltered output — triage is on you, and the response says so explicitly. POST /v1/scan is free with no API key. POST /v1/scan/pay charges $0.10 USDC per scan via x402 on Base. Manual L2-L4 audits at compuute.se/audit when you need dataflow review. Wraps compuute-scan (MIT, zero deps). Per-rule false-positive rates and the methodology paper live in the repo.