Taint Analysis For User Input Tracking

via “taint analysis for data flow tracking and exfiltration detection”

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

Unique: Implements taint analysis specifically for agent data flows, tracking how sensitive data (system prompts, API keys) propagates through hooks, tools, and external calls; identifies exfiltration paths that static analysis alone would miss by modeling data dependencies

vs others: More specialized than generic data flow analyzers because it understands agent-specific data sources (system prompts, tool outputs) and sinks (network requests, logs, tool parameters)

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Features: • 275+ security rules for Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unav

Unique: Employs a comprehensive taint analysis approach to track user input, which is often overlooked in simpler tools.

vs others: More thorough than basic input validation tools, providing deeper insights into data flow.