Security scanner for MCP servers and repositories that detects injection attacks, unicode exploits, capability mismatches, shadowing, and rug-pull attempts in MCP tool definitions
honeybadger_scan has a well-structured input schema with 5 parameters, all typed and described. The tool description (127 chars) clearly states purpose and output format (PASS/WARN/FAIL). However, the output schema is not documented, LLMs cannot predict what fields the response contains or how to chain results. The 'paranoia' enum is properly constrained. Parameter descriptions are adequate but lack format guidance (e.g., what constitutes a valid repo_url format, expected SHA256 format). No error handling guidance is visible, LLMs won't know how to recover from network failures, invalid repos, or malformed hashes.
Scan a GitHub or GitLab repository for security issues before installation. Returns PASS/WARN/FAIL with detailed reasoning.
Output schema not documented. LLMs cannot predict response structure or chain results to downstream tools.
No error handling guidance. Tool lacks recovery hints for network failures, invalid repos, or malformed input.
Parameter format constraints missing. repo_url, installed_sha, and installed_tool_hash lack format descriptions (e.g., 'valid GitHub/GitLab URL', 'SHA256 hex string').
STDIO-only transport. Server is not remotely accessible and cannot be used by hosted MCP clients.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 56 | 2026-07-28+ | v2 |