io.github.sparkvibe-io/GuardianShield

Registre officiel Outils de développement

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

Que pouvez-vous faire avec io.github.sparkvibe-io/GuardianShield ?

Code Vulnerability Scanning — SQL injection, XSS, command injection, path traversal with CWE IDs and auto-fix remediation
Cross-line Data Flow Analysis — DeepEngine tracks tainted data from sources to sinks across multiple lines using AST-based taint propagation (Python) and regex (JS/TS)
Dependency Security — Version-aware CVE matching against OSV.dev for PyPI, npm, Go, and Packagist ecosystems
Manifest Parsing — Auto-detects 11 formats (requirements.txt, package.json, yarn.lock, go.mod, composer.json, and more)
Prompt Injection Defense — 9+ detection patterns for instruction override, role hijacking, ChatML injection
PII Detection — Email, SSN, credit card, phone, IP — with automatic redaction in findings
Secret Detection — AWS keys, GitHub tokens, Stripe keys, JWTs, passwords, connection strings
Safety Profiles — 5 built-in profiles (general, education, healthcare, finance, children)

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

PYPI package guardianshield

Claude Code

claude mcp add guardianshield -e 'GUARDIANSHIELD_PROFILE=<GUARDIANSHIELD_PROFILE>' -e 'GUARDIANSHIELD_AUDIT_PATH=<GUARDIANSHIELD_AUDIT_PATH>' -e 'GUARDIANSHIELD_DEBUG=<GUARDIANSHIELD_DEBUG>' -- uvx guardianshield==1.2.1

Configuration JSON (Claude Desktop, Cursor, VS Code)

{
    "mcpServers": {
        "guardianshield": {
            "command": "uvx",
            "args": [
                "guardianshield==1.2.1"
            ],
            "env": {
                "GUARDIANSHIELD_PROFILE": "<GUARDIANSHIELD_PROFILE>",
                "GUARDIANSHIELD_AUDIT_PATH": "<GUARDIANSHIELD_AUDIT_PATH>",
                "GUARDIANSHIELD_DEBUG": "<GUARDIANSHIELD_DEBUG>"
            }
        }
    }
}

Variables d'environnement

GUARDIANSHIELD_PROFILE Default safety profile (general, education, healthcare, finance, children)
GUARDIANSHIELD_AUDIT_PATH Path to the SQLite audit database
GUARDIANSHIELD_DEBUG Set to 1 for debug logging

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire

GuardianShield
Features
Install
Quick Start
Editor Integration
MCP Tools
Configuration
Documentation
License

GuardianShield

[]()

Universal AI security layer — an open-source MCP server for code scanning, PII detection, prompt injection defense, secret detection, dependency auditing, and audit logging.

Zero dependencies · 27 MCP tools · 5 safety profiles · 108+ detection patterns

Features

Code Vulnerability Scanning — SQL injection, XSS, command injection, path traversal with CWE IDs and auto-fix remediation
Cross-line Data Flow Analysis — DeepEngine tracks tainted data from sources to sinks across multiple lines using AST-based taint propagation (Python) and regex (JS/TS)
Dependency Security — Version-aware CVE matching against OSV.dev for PyPI, npm, Go, and Packagist ecosystems
Manifest Parsing — Auto-detects 11 formats (requirements.txt, package.json, yarn.lock, go.mod, composer.json, and more)
Prompt Injection Defense — 9+ detection patterns for instruction override, role hijacking, ChatML injection
PII Detection — Email, SSN, credit card, phone, IP — with automatic redaction in findings
Secret Detection — AWS keys, GitHub tokens, Stripe keys, JWTs, passwords, connection strings
Safety Profiles — 5 built-in profiles (general, education, healthcare, finance, children)
Audit Logging — SQLite-backed scan history with finding retrieval and filtering

Install

pip install guardianshield

Quick Start

# Register with Claude Code
claude mcp add guardianshield -- guardianshield-mcp

# Or run directly
guardianshield-mcp

Editor Integration

# Claude Code
claude mcp add guardianshield -- guardianshield-mcp

# VS Code (.vscode/mcp.json)
{"servers": {"guardianshield": {"type": "stdio", "command": "guardianshield-mcp"}}}

# Cursor (.cursor/mcp.json)
{"mcpServers": {"guardianshield": {"command": "guardianshield-mcp"}}}

# Claude Desktop (claude_desktop_config.json)
{"mcpServers": {"guardianshield": {"command": "guardianshield-mcp"}}}

MCP Tools

Scanning

Tool	Description
`scan_code`	Scan source code for vulnerabilities and hardcoded secrets
`scan_file`	Scan a single file (auto-detects language from extension)
`scan_directory`	Recursively scan a directory with filtering and progress streaming
`scan_input`	Check user/agent input for prompt injection attempts
`scan_output`	Check AI output for PII leaks and content violations
`check_secrets`	Detect hardcoded secrets and credentials
`scan_files`	Scan multiple files in one call
`scan_diff`	Parse unified diff and scan only added lines

Dependency Security

Tool	Description
`check_dependencies`	Check packages for known CVEs via OSV.dev (PyPI, npm, Go, Packagist)
`sync_vulnerabilities`	Sync the local OSV vulnerability database
`parse_manifest`	Parse any supported manifest file (11 formats) into dependency objects
`scan_dependencies`	Scan a directory for manifest files and check all deps for vulnerabilities

False Positive Management

Tool	Description
`mark_false_positive`	Mark a finding as false positive (flags future matches)
`list_false_positives`	List active false positive records with optional filter
`unmark_false_positive`	Remove a false positive record by fingerprint

Engine Management

Tool	Description
`list_engines`	List available analysis engines with capabilities
`set_engine`	Set active analysis engines for code scanning

Three engines ship built-in: regex (line-by-line pattern matching, enabled by default), deep (cross-line taint tracking), and semantic (structure-aware confidence adjustment).

CI & Developer Workflow

Tool	Description
`export_sarif`	Export findings as SARIF 2.1.0 JSON for GitHub Code Scanning and CI
`save_baseline`	Save current findings as a baseline for delta scanning
`scan_with_baseline`	Scan code and report only new findings vs. baseline
`check_quality_gate`	Evaluate findings against severity thresholds (pass/fail/warn)
`scan_files`	Scan multiple files in one call
`scan_diff`	Parse unified diff and scan only added lines

Configuration & Utilities

Tool	Description
`get_profile`	Get current safety profile configuration
`set_profile`	Switch safety profile (general, education, healthcare, finance, children)
`test_pattern`	Test a regex pattern against sample code for custom pattern development
`audit_log`	Query the security audit log
`get_findings`	Retrieve past findings with filters
`shield_status`	Get health, configuration, and OSV cache statistics

Configuration

Set environment variables to customize behavior:

Variable	Description	Default
`GUARDIANSHIELD_PROFILE`	Default safety profile	`general`
`GUARDIANSHIELD_AUDIT_PATH`	Path to SQLite audit database	`~/.guardianshield/audit.db`
`GUARDIANSHIELD_DEBUG`	Enable debug logging (`1`)	disabled

Documentation

Full documentation: sparkvibe-io.github.io/GuardianShield

License

Apache 2.0

Questions fréquentes

Qu'est-ce que io.github.sparkvibe-io/GuardianShield ?

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

Comment installer io.github.sparkvibe-io/GuardianShield ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add guardianshield -e 'GUARDIANSHIELD_PROFILE=<GUARDIANSHIELD_PROFILE>' -e 'GUARDIANSHIELD_AUDIT_PATH=<GUARDIANSHIELD_AUDIT_PATH>' -e 'GUARDIANSHIELD_DEBUG=<GUARDIANSHIELD_DEBUG>' -- uvx guardianshield==1.2.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour io.github.sparkvibe-io/GuardianShield ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

io.github.sparkvibe-io/GuardianShield est-il open source ?

Oui. Son code est sur GitHub sous licence Apache-2.0.

Qui maintient io.github.sparkvibe-io/GuardianShield ?

Il est publié par sparkvibe-io. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.

Détails du serveur

Référencé dans: Registre MCP officiel
Éditeur: sparkvibe-io
Catégorie: Outils de développement
Exécution: Local
Étoiles GitHub: ★ 3
Licence: Apache-2.0
Langage: Python
Dernier commit: 3 mars 2026
Tickets ouverts: 3
Version: 1.2.1
Publié le: 3 mars 2026

io.github.sparkvibe-io/GuardianShield

Serveurs similaires

Vulnerability Exposure Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CIS...
debuff Let coding agents play, test and tune your 2D web game: live state, explained errors, r...
Advanced GitLab MCP server 64 CQRS tools exposing 235 GitLab operations across 26 entity types
ContextStream MCP Server The context platform for AI agents: code search, team decisions, and grounded project c...
ljos Local memory, a work tracker and a shell-command guard shared by coding agents on one m...
Sendora Sendora's docs and API for coding agents: send test mail, read the log, set up webhooks.
Whiteboard MCP Local Excalidraw whiteboard your coding agent draws on live, and sees what you draw back.
Hronaut Browser MCP A visible desktop browser for coding agents, with a separate workspace for each project.

Outils de développement