From 4166721bf2d0c1436ee822562b4a83c89c1adecd Mon Sep 17 00:00:00 2001 From: saintL Date: Tue, 14 Jul 2026 19:07:34 +0800 Subject: [PATCH] =?UTF-8?q?Add=20CallLint=20=E2=80=94=20pre-flight=20MCP?= =?UTF-8?q?=20security=20linter?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index a1980e06d..bc412fd50 100644 --- a/README.md +++ b/README.md @@ -2955,6 +2955,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [BeBraveBeKind/mcpskills-server](https://github.com/BeBraveBeKind/mcpskills-server) [![BeBraveBeKind/mcpskills-server MCP server](https://glama.ai/mcp/servers/BeBraveBeKind/mcpskills-server/badges/score.svg)](https://glama.ai/mcp/servers/BeBraveBeKind/mcpskills-server) 📇 🏠 🍎 🪟 🐧 - Pre-install trust layer for MCP servers, AI skills, and npm packages. Scores any repo or package across 15 signals (incl. OSV/KEV/EPSS vulnerability intelligence) with safety scanning for prompt injection, credential theft, and supply-chain risk; the `auto_gate` tool returns a go/no-go install decision. Listed in the official MCP Registry as `io.mcpskills/server`. npm: `@mcpskillsio/server`. https://mcpskills.io - [gautam-u/sieve-mcp](https://github.com/gautam-u/sieve-mcp) [![gautam-u/sieve-mcp MCP server](https://glama.ai/mcp/servers/gautam-u/sieve-mcp/badges/score.svg)](https://glama.ai/mcp/servers/gautam-u/sieve-mcp) 🏠 🍎 - Local AI chat history secret scanner for macOS. Finds API keys and secrets leaked into Claude Code, Cursor, Copilot Chat, Cline, Codex, Gemini CLI, and other AI tool transcripts. 9 MCP tools: findings list with redacted previews, boolean secret detection (`sieve_check_text`), placeholder-only redaction (`sieve_redact_text` returns `sieve://project/key`, never raw values), vault-backed command execution, and scan health. Local-only stdio transport, macOS Keychain vault, no plaintext secrets in any tool response. [Mac App Store](https://apps.apple.com/app/sieve-ai-secret-scanner/id6747506504). - [yessGlory17/job-verify](https://github.com/yessGlory17/job-verify) [![yessGlory17/job-verify MCP server](https://glama.ai/mcp/servers/yessGlory17/job-verify/badges/score.svg)](https://glama.ai/mcp/servers/yessGlory17/job-verify) 🐍 ☁️ 🍎 🪟 🐧 - Check whether a recruiter or job offer is a scam before you reply. Extracts entities (company, links, email, phone, wallets) from a pasted message and cross-checks company registration, domain age, look-alike/typosquat domains, phishing & malware blocklists, email deliverability, crypto-scam databases, and Internet Archive history — free OSINT, no API keys. +- [calllint/calllint](https://github.com/calllint/calllint) 📇 🏠 - Pre-flight security linter for MCP servers, agent tools, and skills. Scans a config *before* it runs — offline, deterministic, evidence-backed — and returns SAFE / REVIEW / BLOCK / UNKNOWN verdicts without executing the server it judges. CLI (`npx calllint scan`), MCP server (`npx calllint-mcp`), SARIF + CI gate. UNKNOWN is never SAFE. ### 🌐 Social Media