Ducarv/mcpmoat

Rule MOAT-T1-009: Instructions hidden in schema fields or defaults 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Config readers for VS Code, Claude Desktop, Windsurf 18 days ago

help wanted good first issue model:haiku effort:high type:feature area:discover phase:2

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T5-001: Server or package name close to a popular server 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T4-004: Auto-install flags (--yes / -y) on package runners 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T4-003: Unpinned package version (@latest or no version) 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T4-002: Plaintext secret in env or headers 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T4-001: Remote server over plain http:// 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T3-001: Description changes the behaviour of another tool (shadowing) 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-008: Base64 payload in description 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-007: Oversized tool description 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-006: Invisible or bidirectional Unicode characters 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-005: Description asks to send data to a URL (exfiltration) 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-004: Description mentions reading sensitive local files 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-003: Tool description tells the model to hide actions from the user 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-002: Hidden instruction markup in descriptions 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Rule MOAT-T1-001: Imperative instructions aimed at the model 18 days ago

help wanted good first issue model:haiku effort:high type:rule area:rules phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Fake benign MCP server in testdata/servers/benign 18 days ago

help wanted model:haiku effort:high type:test area:inspect phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Discovery fixtures and table-driven tests for each client format 18 days ago

help wanted model:haiku effort:high type:test area:discover phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Cursor reader: ~/.cursor/mcp.json and .cursor/mcp.json 18 days ago

help wanted model:haiku effort:high type:feature area:discover phase:1

Ducarv/mcpmoat

1

Personal MCP firewall: offline scanner for malicious or tampered MCP servers (Go CLI)

Go

#ai-agents#cli#golang#mcp#model-context-protocol#security

Open Issues Need Help