r/coolgithubprojects • u/DiscussionHealthy802 • 2h ago

Ship Safe: open-source scanner for AI coding agents and MCP servers

https://github.com/asamassekou10/ship-safe

I’m the maintainer of Ship Safe. I built it to inspect the security surface around AI-assisted development, including prompt injection, secrets, MCP tools, agent permissions, dependencies, and common application issues.

The part I’m most interested in is the investigation layer. It keeps detection, evidence, and verdicts separate, then checks whether the cited path actually supports the conclusion.

It runs locally and is open source. Feedback is especially welcome from people building coding agents or MCP servers.

1 Upvotes

100% Upvoted

2 comments sorted by

1

u/Specific_Cream2815 2h ago

how does it detect prompt injection, pattern matching on known payloads or something semantic

1

u/DiscussionHealthy802 2h ago

It’s mostly pattern-based, but it also checks the surrounding context and whether the input can reach a tool or credential. It looks for common hijacking tricks, hidden or encoded instructions, and suspicious tool calls, while the optional AI/red-team pass provides an advisory second opinion