This tool is no longer present in the server's latest manifest. Showing the last observed version (server version 4.97.1).
code-security-scan
InactiveTool of The Stall
declared in 4.97.1
Source-code security scan of a public GitHub repo. Runs semgrep SAST (p/security-audit rules: CWE coverage for injection, XSS, SQLi, path traversal, SSRF, auth bypass, deserialization, race conditions) + gitleaks secret detection (API keys, credentials, tokens). Returns structured findings with file/line/CWE/severity and any exposed secrets. authorized=true required — caller certifies ownership or written permission for the target repo. Typical execution: 20–90s depending on repo size. Powered by T3MP3ST arsenal.
Parameters schema
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"repo_url",
"authorized"
],
"properties": {
"repo_url": {
"type": "string",
"description": "Public GitHub HTTPS URL of the repository to scan, e.g. 'https://github.com/owner/repo'. Must be a public repo (no auth is provided)."
},
"authorized": {
"type": "string",
"description": "Must be 'true'. By submitting you certify you own this repository or have explicit written authorization to perform a security audit against it."
}
},
"additionalProperties": false
}No endpoints wrapped at confidence ≥ 0.70.
Parent server
The Stall
1/7 registries