Scan MCP configs & Agent code
for 215 fault types

# Install from PyPI $ pip install correctover-security-audit Successfully installed correctover-security-audit-1.0.0 # Quick scan — scans current directory $ correctover-security-audit quick ╭─ Correctover Security Audit ───────────────────╮ │ Scanning: ./mcp-config.json │ │ Rules: 88 (64 high-confidence) │ │ Fault types: 215 │ ╰─────────────────────────────────────────────────╯ ⚠ HIGH Command Injection (CWE-78) File: ./server.py:42 Rule: UNSAFE-SHELL-EXEC Pattern: subprocess.call(user_input, shell=True) ⚠ HIGH SSRF (CWE-918) File: ./tool_handler.py:87 Rule: UNRESTRICTED-URL-FETCH Pattern: requests.get(url_from_llm) ✗ CRIT Credential Exposure (CWE-200) File: ./config.py:15 Rule: HARDCODED-API-KEY Pattern: OPENAI_API_KEY = "sk-..." ───────────────────────────────────────────────── Results: 3 findings (1 critical, 2 high) Scan time: 0.34s Free tier: 47/50 scans remaining today # Full scan with JSON output for CI/CD $ correctover-security-audit scan-mcp --format json --output report.sarif ✓ Report written to report.sarif (SARIF format)