slowmist/MCP-Security-Checklist external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

slowmist/MCP-Security-Checklist

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/slowmist/MCP-Security-Checklist)

Close

slowmist / MCP-Security-ChecklistView on GitHubMore

• External links
• Readme badge

A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.

☆805Apr 28, 2025Updated 10 months ago

Alternatives and similar repositories for MCP-Security-Checklist

Users that are interested in MCP-Security-Checklist are comparing it to the libraries listed below

• alipay / ant-application-security-testing-benchmark

  View on GitHub
  xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".
  ☆463Jan 15, 2026Updated last month
• Tencent / AI-Infra-Guard

  View on GitHub
  A full-stack AI Red Teaming platform securing AI ecosystems via AI Infra scan, MCP scan, Agent skills scan, and LLM jailbreak evaluation.
  ☆3,056Updated this week
• snyk / agent-scan

  View on GitHub
  Security scanner for AI agents, MCP servers and agent skills.
  ☆1,699Updated this week
• SpringKill-team / CodeAuditAssistant

  View on GitHub
  🔍 CodeAuditAssistant - IDEA代码审计插件（公测中） ⚡ 精准追踪复杂调用链 | 🚀 毫秒级方法搜索 | 🔥 内置高危漏洞检测 原生集成 | 反编译/路径分析 | 内存优化 | 安全审计利器 🔍 Co…
  ☆774Aug 3, 2025Updated 7 months ago
• yulate / jdbc-tricks

  View on GitHub
  《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…
  ☆571Feb 7, 2026Updated last month
• slowmist / MasterMCP

  View on GitHub
  A demonstration toolkit revealing potential security vulnerabilities in MCP (Model Context Protocol) frameworks through data poisoning, J…
  ☆93Jul 6, 2025Updated 8 months ago
• Acmesec / theAIMythbook

  View on GitHub
  Ai迷思录（应用与安全指南）
  ☆1,228Mar 24, 2025Updated 11 months ago
• gh0stkey / CaA

  View on GitHub
  CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.
  ☆1,432Feb 9, 2026Updated 3 weeks ago
• rmb122 / rogue_mysql_server

  View on GitHub
  A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.
  ☆755Dec 2, 2022Updated 3 years ago
• neargle / re0-kubernetes-sec-archive

  View on GitHub
  [WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐
  ☆3,147Nov 6, 2025Updated 4 months ago
• fnmsd / MySQL_Fake_Server

  View on GitHub
  MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize
  ☆1,361Nov 18, 2021Updated 4 years ago
• ASTTeam / CodeQL

  View on GitHub
  《深入理解CodeQL》Finding vulnerabilities with CodeQL.
  ☆1,757Nov 21, 2023Updated 2 years ago
• vulhub / java-chains

  View on GitHub
  Java Vulnerability Exploitation Platform
  ☆1,990Jan 6, 2026Updated 2 months ago
• zema1 / watchvuln

  View on GitHub
  一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services
  ☆1,779Nov 26, 2025Updated 3 months ago
• tabby-sec / tabby

  View on GitHub
  A CAT called tabby ( Code Analysis Tool )
  ☆1,638Jan 17, 2026Updated last month
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆440Sep 10, 2021Updated 4 years ago
• jar-analyzer / jar-analyzer

  View on GitHub
  Jar Analyzer - 一个 JAR 包 GUI 分析工具，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索，紧跟 AI 技术发…
  ☆1,936Feb 22, 2026Updated last week
• SummerSec / JavaLearnVulnerability

  View on GitHub
  Java漏洞学习笔记 Deserialization Vulnerability
  ☆945Jun 14, 2023Updated 2 years ago
• W01fh4cker / LearnJavaMemshellFromZero

  View on GitHub
  【三万字原创】完全零基础从0到1掌握Java内存马，公众号：追梦信安
  ☆987May 25, 2025Updated 9 months ago
• safe6Sec / Fastjson

  View on GitHub
  Fastjson姿势技巧集合
  ☆1,829Oct 20, 2023Updated 2 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆835Jun 7, 2022Updated 3 years ago
• Phelaine / SinkFinder

  View on GitHub
  闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数
  ☆503Jan 12, 2026Updated last month
• lemono0 / FastJsonParty

  View on GitHub
  FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用
  ☆1,186Jul 12, 2024Updated last year
• SummerSec / learning-codeql

  View on GitHub
  CodeQL Java 全网最全的中文学习资料
  ☆799Mar 18, 2022Updated 3 years ago
• wgpsec / cloudsword

  View on GitHub
  一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具
  ☆596Feb 3, 2026Updated last month
• ReaJason / MemShellParty

  View on GitHub
  一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率
  ☆1,344Updated this week
• Y4tacker / JavaSec

  View on GitHub
  a rep for documenting my study, may be from 0 to 0.1
  ☆2,249Nov 10, 2025Updated 3 months ago
• wyzxxz / aksk_tool

  View on GitHub
  AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…
  ☆779Feb 13, 2025Updated last year
• Ta0ing / MCP-SecurityTools

  View on GitHub
  MCP-SecurityTools 是一个专注于收录和更新网络安全领域 MCP 的开源项目，旨在汇总、整理和优化各类与 MCP 相关的安全工具、技术及实战经验。
  ☆389Apr 7, 2025Updated 11 months ago
• phith0n / JavaThings

  View on GitHub
  Share Things Related to Java - Java安全漫谈笔记相关内容
  ☆1,995Apr 9, 2025Updated 10 months ago
• l3yx / Choccy

  View on GitHub
  GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)
  ☆466Jan 19, 2025Updated last year
• bitterzzZZ / MemoryShellLearn

  View on GitHub
  分享几个直接可用的内存马，记录一下学习过程中看过的文章
  ☆975Mar 23, 2022Updated 3 years ago
• bit4woo / domain_hunter_pro

  View on GitHub
  domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
  ☆2,116Jan 23, 2026Updated last month
• vaycore / OneScan

  View on GitHub
  OneScan 是一款用于递归目录扫描的 BurpSuite 插件
  ☆1,231Jun 24, 2025Updated 8 months ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,239Feb 17, 2025Updated last year
• HackJava / HackJava

  View on GitHub
  《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
  ☆2,872Aug 4, 2023Updated 2 years ago
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆736Sep 9, 2024Updated last year
• ax1sX / SecurityList

  View on GitHub
  A list for Web Security and Code Audit
  ☆1,214Dec 3, 2024Updated last year
• Maskhe / javasec

  View on GitHub
  自己学习java安全的一些总结，主要是安全审计相关
  ☆1,695Jan 5, 2022Updated 4 years ago