AIShield Security Scanner

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Connector by lm203688 · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 2

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/lm203688-aishield

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools: 9 read · 1 write · 0 delete · 7 not yet classified
Secrets: None asked for
Install scripts: None found
Runs as: Node.js package

Tools by what they do 17

Read from the source code; the running server may list different tools.

Read 9 · Look things up without changing anything.

agent_quick_scan
aishield_prompt_check
aishield_scan
banned_words_check
dependency_monitor
get_weather
prompt_injection_check
rug_pull_detect
security_scan

Write 1 · Create, change, send or run things.

agent_register

Not yet classified 7 · We could not tell from the name and description.

aishield_banned_words
aishield_digest
aishield_guardrail
aishield_handshake
aishield_rug_pull
aishield_vertical_risk
intercept

Show 30 more hosts

docs.aishield.tools · found in code
docs.snyk.io · found in code
docs.x.ai · found in code
evil.sh · found in code
export.arxiv.org · found in code
gist.github.com · found in code
github.com · found in code
gitlab.eclipse.org · found in code
glama.ai · found in code
hackmd.io · found in code
ibm.com · found in code
json.schemastore.org · found in code
lm203688.github.io · found in code
mcp.so · found in code
muse.ai · found in code
notion.so · found in code
nvd.nist.gov · found in code
pkg.cloudflare.com · found in code
platform.claude.com · found in code
plugins.trac.wordpress.org · found in code
pulsemcp.com · found in code
raw.githubusercontent.com · found in code
reddit.com · found in code
smithery.ai · found in code
support.servicenow.com · found in code
target.com · found in code
vuldb.com · found in code
vulncheck.com · found in code
x.sh · found in code
yerangamage.com · found in code

Files it touches

/root/.aws/credentials
/root/.kube/config
/root/.ssh/authorized_keys
/root/.ssh/id_rsa
~/.ssh/config
/dev/tcp
/etc/crontab
/etc/init.d/miner
/etc/mcp.json
/etc/passwd
/etc/shadow
/opt/aishield
/proc/self/environ
/root/.cloudflared
/root/.cloudflared/cert.pem
/root/.cloudflared/config.yml
/root/.cloudflared/tunnel-token
/srv/workspace
/tmp/aishield-deploy.log
/tmp/bridge.sock
/tmp/notes.txt
Your home directory (~)
C:\\Users\\xing\\.workbuddy\\laya\\shadow_ledger.jsonl
C:\\Users\\xing\\Desktop\\aishield\\data\\batch_scans.json
C:\\Users\\xing\\Desktop\\aishield\\data\\fleet.json
C:\\Users\\xing\\Desktop\\aishield\\data\\monitored_tools.json
C:\\Users\\xing\\Desktop\\aishield\\data\\state\\alert_cooldown.json
C:\\Users\\xing\\Desktop\\aishield\\data\\state\\alerts.jsonl
C:\\Users\\xing\\Desktop\\aishield\\data\\state\\detail\\health_probes.json
C:\\Users\\xing\\Desktop\\aishield\\data\\state\\health_probes.json
C:\\Users\\xing\\Desktop\\aishield\\data\\state\\tech_radar.json

Tools (17)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

agent_quick_scan
Agent-First quick scan — scan a tool by name and description, no source URL required
agent_register
One-click agent onboarding with API key and DID identity.
aishield_banned_words
Chinese banned words detection — 6 platform rules
aishield_digest
Compact trust digest (aishield-digest/v1) — a few hundred bytes plus a content fingerprint, so an agent can answer 'can I trust this?' every turn without re-pulling the full report. Accepts {configs} (static analysis only), {scan_result}, or {source_url}. The returned `risk` is never lighter than the worst finding actually present (a config with high findings is never labelled 'safe'), and no plaintext credential is ever echoed back.
aishield_guardrail
Pre-install safety check — pass/block verdict
aishield_handshake
MCP handshake verification — analyze MCP config, detect npx auto-install, sensitive env vars, oversized tool descriptions, and attempt HTTP handshake
aishield_prompt_check
Prompt injection detection — Chinese + English
aishield_rug_pull
Rug pull detection — check if a tool has removed security code or added suspicious changes in recent commits
aishield_scan
OWASP MCP Top 10 aligned security scan — 235 rules, 5-dimension scoring
aishield_vertical_risk
Vertical-industry risk scan — detect high-risk claims for finance/medical/gov sectors (unlicensed diagnosis, illegal medical device, financial over-promise, etc.)
banned_words_check
[DEPRECATED — use aishield_banned_words] Detect banned/sensitive words for 6 Chinese platforms.
dependency_monitor
[DEPRECATED — use aishield_scan with tool_type=monitor] Monitor MCP tool dependencies for version changes.
get_weather
查天气
intercept
在工具执行前做 fail-closed 准入 + 参数内容护栏
prompt_injection_check
[DEPRECATED — use aishield_prompt_check] Detect prompt injection attacks in Chinese and English. 200+ pattern matching.

Show 2 more tools

rug_pull_detect
[DEPRECATED — use aishield_rug_pull] Detect Rug Pull risk in MCP tool repositories.
security_scan
[DEPRECATED — use aishield_scan] Full security audit for MCP tools/agents with OWASP MCP Top 10 alignment.

Compare and alternatives

Featured in

Signals

Stars: 2
Forks: 0
Open issues: 11
Last commit: Oct 24, 2026 (4 days ago)
Last release: Aug 28, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name: io.github.lm203688/aishield
Version: 4.3.0
Auth: No auth
Packages: npm aishield-mcp-server
License: MIT
Repository: github.com/lm203688/aishield
Website: aishield.tools
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql

More from lm203688

Cite this page

AIShield Security Scanner MCP server. Agent Mart. https://agentmart.dev/connectors/lm203688-aishield (last updated 2026-10-24)