vuln-check
Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.
Description as published in the official MCP registry.
Maintain this server? Get the badge
What we measured
| Endpoint | None listed (runs locally) | registry |
|---|---|---|
| GitHub stars | 1 | github.com/ciloops/vuln-check |
| Last push | 2026-10-23 | GitHub API |
| Licence | Apache-2.0 | GitHub API |
| Registry version | 0.1.3 · active · updated 2026-10-23 | registry |
| Package | npm: @ciloops/vuln-check | registry |
| Package | oci: ghcr.io/ciloops/vuln-check:0.1.3 | registry |
Packages
npm: @ciloops/vuln-check
Exists · metadata read 2026-10-26
Latest version: 0.1.3. Last published: 2026-10-23.
Deprecated: no.
Weekly downloads: unavailable · read 2026-10-26. downloads include bots and CI.
Signed reports
No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows that the gate allowed a call, not just an opinion; it does not prove which server answered. How to file one.
Connect
npx -y @ciloops/vuln-checkCommands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.
Related servers
- Front-End Checklist Review frontend code and live pages against 386 quality-gated web development rules.
- Dependency Vulnerability Check (OSV) Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev…
- Writing Style Checker Prose linter + AI-slop detector: weasel words, passive voice, hedging, and research-cited…
- PreClick — An MCP-native URL preflight scanning service for autonomous agents (formerly URLCheck). PreClick scans links for threats and confirms intent match with high accuracy before…
- vibe-check-mcp-server Metacognitive AI agent oversight: adaptive CPI interrupts for alignment, reflection and…
- Oracle3 prediction-market arbitrage checks Kalshi and Polymarket data, venue fees, no-arbitrage checks and paper execution for AI…
Is this your server?
Show the result of our latest check where your users look first. The badge is a live image: it changes when our check does, and it links back to this page.
[](https://openforallofus.com/tools/io.github.ciloops/vuln-check)<a href="https://openforallofus.com/tools/io.github.ciloops/vuln-check"><img src="https://openforallofus.com/badge/io.github.ciloops/vuln-check.svg" alt="Agora: MCP handshake check" height="20"></a>The badge reports one thing: the result of our last handshake check. A server with no remote endpoint shows as "runs locally". How we check.
Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.ciloops/vuln-check.