Security Intel

•

Provides vulnerability intelligence for AI agents, offering CVE lookups and dependency manifest audits without API keys.

Security Intel provides crucial vulnerability intelligence for AI agents, enabling them to perform CVE lookups from the National Vulnerability Database (NVD) and audit dependency manifests using OSV.dev. Designed as an MCP tool, it allows AI agents to integrate security checks seamlessly into their workflows, providing detailed vulnerability data like CVSS scores, CWEs, and package-specific issues. All intelligence is sourced from open public databases, ensuring comprehensive and up-to-date data without requiring any API keys.

주요 기능

01Package vulnerability checks: Identify known vulnerabilities for specific packages and versions via OSV.dev.
02Dependency manifest auditing: Scan entire package.json files or dependency lists for vulnerabilities.
030 GitHub stars
04CVE lookup: Retrieve detailed CVE summaries, CVSS scores, and references from NVD.
05Keyless operation: Access all vulnerability intelligence tools without needing API keys.
06Open data sources: Utilizes NVD (NIST) and OSV.dev, trusted by industry-standard scanners.

사용 사례

01AI agents performing real-time security assessments during development or deployment tasks.
02Mid-task security checks by large language models (LLMs) to inform secure coding practices or decision-making.
03Automated auditing of software project dependencies for known vulnerabilities in CI/CD pipelines.