# AIShield Security Scanner [Health: Active] **Category:** 💻 Developer Tools **Repository:** https://github.com/lm203688/aishield **GitHub Stars:** 2 **Views:** 0 **Installs:** 0 **Upvotes:** 0 **Directory Page:** https://allmcps.com/mcp/aishield-security-scanner ## Description Scans MCP servers for tool poisoning, prompt injection and supply chain risks. ## Claude Desktop Quick Installation Install path detected from listing signals. Uses `npx` (confidence: high): ```json "mcpServers": { "aishield-security-scanner": { "command": "npx", "args": ["-y","aishield-mcp-server"] } } ``` ## Documentation & README

AIShield

AI Agent 瀹夊叏鐢熸€佸熀纭€璁炬柦
璁╀换浣?Agent 鍙互瀹夊叏鍦板彂鐜般€侀獙璇併€佸鎵樸€佹敮浠樺彟涓€涓?Agent

MIT License Python 3.9+ OWASP MCP Top 10 227 MCP / 233 Skill Rules Zero Dependencies v4.2.2

馃枼锔?鏈湴浼樺厛 路 闆朵緷璧?路 浠ｇ爜涓嶅嚭鏈?/strong>
寮€婧愭湰鍦扮増 鈥?涓庡悓鍚嶄簯 SaaS aishield.ai 鏄畬鍏ㄤ笉鍚岀殑浜у搧

``` 鈻堚枅鈻堚枅鈻堚枅鈺椻枅鈻堚晽 鈻堚枅鈺椻枅鈻堚枅鈻堚枅鈻堚晽 鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈻堚枅鈻堚枅鈺?鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈻堚枅鈻堚枅鈻堚晽 鈻堚枅鈻堚枅鈻堚枅鈺? 鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈺氣枅鈻堚晽 鈻堚枅鈺斺暆鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈻堚枅鈺斺晲鈺愨晲鈺愨暆 鈻堚枅鈺? 鈺氣枅鈻堚枅鈻堚晹鈺?鈻堚枅鈻堚枅鈻堚枅鈺斺暆鈻堚枅鈻堚枅鈻堚晽 鈻堚枅鈻堚枅鈻堚枅鈺斺暆鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈻堚枅鈻堚晽 鈻堚枅鈺? 鈻堚枅鈺? 鈺氣枅鈻堚晹鈺? 鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈻堚枅鈺斺晲鈺愨暆 鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈺氣晲鈺愨晲鈺愨枅鈻堚晳鈻堚枅鈺斺晲鈺愨暆 鈻堚枅鈺? 鈺氣枅鈻堚枅鈻堚枅鈻堚晽 鈻堚枅鈺? 鈻堚枅鈻堚枅鈻堚枅鈺斺暆鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈺? 鈻堚枅鈺戔枅鈻堚枅鈻堚枅鈻堚枅鈺戔枅鈻堚枅鈻堚枅鈻堚枅鈺椻暁鈻堚枅鈻堚枅鈻堚枅鈺? 鈺氣晲鈺愨晲鈺愨晲鈺? 鈺氣晲鈺? 鈺氣晲鈺愨晲鈺愨晲鈺?鈺氣晲鈺愨晲鈺愨晲鈺愨暆鈺氣晲鈺? 鈺氣晲鈺濃暁鈺愨晲鈺愨晲鈺愨晲鈺濃暁鈺愨晲鈺愨晲鈺愨晲鈺?鈺氣晲鈺愨晲鈺愨晲鈺? Security 路 Identity 路 Collaboration 路 Trust ``` --- > 馃枼锔?**鏈湴浼樺厛 路 寮€婧?路 鏃犱簯** > AIShield 寮€婧愮増**瀹屽叏鍦ㄤ綘鏈哄櫒涓婅繍琛?*锛氶浂绗笁鏂逛緷璧栥€佸彲 100% 绂荤嚎銆佷唬鐮佷笌閰嶇疆**缁濅笉涓婁紶**浜戠銆佹壂鎻忔椂**缁濅笉鎵ц**琚壂閰嶇疆銆? > 鈿狅笍 **涓?`aishield.ai` 鐨勫尯鍒?*锛氭湰浠撳簱鏄?*鏈湴寮€婧愮増**锛屼笌鍚屽悕鍟嗕笟浜?SaaS **`aishield.ai`**锛堟敞鍐?/ 瀵嗛挜 / 璁¤垂寮忎簯绔湇鍔★級鏄?*瀹屽叏涓嶅悓鐨勪骇鍝?*锛岃鍕挎贩娣嗐€? ## 鏍稿績鐗规€? 馃洝锔?**227 鏉?MCP 瑙勫垯 / 233 鏉?Skill 瑙勫垯** 鈥?瀵归綈 OWASP MCP Top 10 (2025 v0.1) 涓?OWASP Agentic AI Top 10 (ASI01鈥揂SI10)锛岃鐩?Prompt 娉ㄥ叆銆佽秺鏉冭闂€佹暟鎹硠闇层€佸崗璁敾鍑汇€佷緵搴旈摼椋庨櫓銆佹矙绠遍€冮€?6 澶х淮搴? 馃О **Agent 璁＄畻鏈虹殑鍐呭瀹夊叏骞抽潰** 鈥?Cloudflare Sandboxes銆乫orgevm銆丒2B銆丱pen Interpreter銆丟oose 杩欑被杩愯鏃剁鐨勬槸**鐖嗙偢鍗婂緞**锛坅gent 鑳界鍒颁粈涔堬級锛孉IShield 绠＄殑鏄?*鍐呭鍙俊**锛坅gent 璇昏繘鏉ョ殑 MCP server銆乻kill銆佸伐鍏锋弿杩拌涓嶈淇★級銆備袱鑰呬簰琛ワ細鍚姩鍓嶅伐浣滃尯棰勬壂 鈫?娌欑纭寲瑙勫垯 鈫?姣忔璋冪敤鍑嗗叆 鈫?鎸佺画閴磋瘉銆傝瑙?[Agent 璁＄畻鏈虹殑涓や釜瀹夊叏骞抽潰](https://github.com/lm203688/aishield/blob/HEAD/docs/agent-computer-security-plane.md) 馃搫 **Markdown 鎸夊彲鎵ц浣撴壂鎻?* 鈥?瀵?Skill 绫昏祫浜э紝`SKILL.md` 鏈韩灏辨槸绋嬪簭銆傛妸 `.md` 涓€寰嬪綋銆屾枃妗ｇず渚嬨€嶉檷绾х殑鎵弿鍣紝浼氭暣鏉℃紡鎺?skill 渚涘簲閾? 馃 **鏅鸿兘 Prompt 娉ㄥ叆妫€娴?* 鈥?鍘熺敓鏀寔涓枃妫€娴嬶紝璇嗗埆鎷奸煶鍙樹綋銆佽皭闊虫浛鎹€佹媶瀛楁敾鍑荤瓑鏈湡鍖栫粫杩囨墜娉? 馃 **Agent 韬唤绯荤粺** 鈥?DID 鍘讳腑蹇冨寲韬唤鐢熸垚銆佸绾т俊瑾夎瘎鍒嗐€丄PI Key 鐢熷懡鍛ㄦ湡绠＄悊銆佸畬鏁村璁℃棩蹇楅摼 馃 **Agent 鍗忎綔閫氫俊** 鈥?鍐呯疆鍙戝竷/璁㈤槄娑堟伅鎬荤嚎銆佸崗浣滀細璇濈鐞嗐€佽法 Agent 浠诲姟濮旀墭锛岃 Agent 涔嬮棿瀹夊叏瀵硅瘽 馃摝 **瀹夊叏娌欑鎵ц** 鈥?浠ｇ爜棰勬鏌ユ嫤鎴嵄闄╂ā寮忥紝鏀寔 Python / JavaScript / Shell 澶氳瑷€闅旂鎵ц锛岀粨鏋滆嚜鍔ㄥ畨鍏ㄥ鏌? 馃彧 **鎶€鑳藉競鍦?* 鈥?鎶€鑳藉彂甯冦€佹悳绱笌璋冪敤涓€浣撳寲锛屽唴缃瘎鍒嗙郴缁燂紝鏀寔 HTTP RPC 鐪熷疄璋冪敤楠岃瘉 馃敆 **A2A 鍗忚缃戝叧** 鈥?鍏煎 Google A2A 鍗忚锛孉gent Card 娉ㄥ唽涓庡彂鐜帮紝鏅鸿兘浠诲姟璺敱涓庤法 Agent 璋冨害 馃攲 **6 澶у閮ㄩ」鐩泦鎴愭ā鍧?* 鈥?鍗虫彃鍗崇敤鐨勫畨鍏ㄥ寮哄浠讹細 | 妯″潡 | 鍔熻兘 | 渚濊禆 | |:---|:---|:---| | BB Browser | 36 骞冲彴 103 鍛戒护濞佽儊鎯呮姤閲囬泦閫傞厤鍣?| 闆朵緷璧?| | Browser Use | AI 椹卞姩娴忚鍣ㄥ畨鍏ㄦ壂鎻忥紙XSS/SQLi/CSRF/Recon锛?| `browser-use` | | Graph DB | Neo4j/FalkorDB/ArangoDB 濞佽儊鍥捐氨锛屾敾鍑婚摼鏌ヨ | `neo4j` | | Event Stream | Kafka/鍐呭瓨浜嬩欢鎬荤嚎锛孎link 椋庢牸瑙勫垯寮曟搸 | `kafka-python`锛堝彲閫夛級 | | Scan Isolation | vCluster 闅旂鎵弿鐜绠＄悊 | vCluster CLI | | Persistent Agent | Grok Bot 鎸佷箙鍖栧畨鍏ㄧ洃鎺т唬鐞?| xAI API Key | 馃挸 **鏀粯涓庤璐?* 鈥?API 鎸夐噺璁¤垂銆佸椁愮鐞嗐€佷娇鐢ㄩ噺缁熻锛屼负 Agent 缁忔祹鎻愪緵鍩虹璁炬柦 馃弳 **瀹夊叏璁よ瘉寰界珷** 鈥?鎵弿閫氳繃鑷姩绛惧彂璁よ瘉锛岀敓鎴愬彲宓屽叆 GitHub README 鐨?SVG 寰界珷锛岄噾 / 閾?/ 閾滀笁绾? 馃寪 **涓珛淇′换鏈烘瀯锛圢eutral Trust Authority锛?* 鈥?AIShield 涓嶅彧鏄壂鎻忓櫒锛屾洿鏄?agent 鐢熸€佺殑**淇′换灞?*锛氭瘡涓鎵祫浜ч兘鎷垮埌涓€寮犳満鍣ㄥ彲璇汇€佸彲绛惧悕銆佸彲宓屽叆鍙戠幇鏍煎紡鐨?[Trust Attestation锛坄aishield-trust/v1`锛塢(docs/trust-attestation-spec.md) 鍑瘉銆侻CP Server Card / A2A Agent Card / Google `ai-catalog` 鍙渶鍦ㄨ嚜宸辩殑 metadata 閲屽姞涓€涓?`trust` 瀛楁锛屽氨鑳介浂鎴愭湰寮曠敤 AIShield 鐨勩€屽唴瀹规槸鍚﹀彲淇°€嶈鍐斥€斺€旇€岃繖涓€灞傜洰鍓嶆槸鏁存潯 agent 渚涘簲閾炬渶钖勫急銆佷篃鏈€琚姠浣嶇殑绌虹櫧銆侫IShield 鐨勫樊寮傚寲閿氱偣锛?*鍞竴鏈湴绂荤嚎銆佹壂鍐呭锛坧rompt 娉ㄥ叆 / 宸ュ叿涓瘨 / 渚涘簲閾炬紓绉伙級銆佺粷涓嶆墽琛岃鎵厤缃?*鐨勪俊浠昏鍐炽€傜敓鎬佸崰浣嶇瓥鍒掕 [docs/ecosystem-positioning-2026.md](https://github.com/lm203688/aishield/blob/HEAD/docs/ecosystem-positioning-2026.md)銆? --- ## 涓轰粈涔堥€夋嫨 AIShield | | AIShield | 绾壂鎻忓伐鍏?| 闂簮鍟嗕笟鏂规 | 鏃犱氦鏄撶殑骞冲彴 | |:---|:---:|:---:|:---:|:---:| | 寮€婧愰€忔槑 | **MIT 鍏ㄥ紑婧?* | 閮ㄥ垎寮€婧?| 鉂?榛戠洅 | 閮ㄥ垎寮€婧?| | 瀹夊叏瑙勫垯瑕嗙洊 | **227 / 233 鏉?(OWASP 鍙岀淮瀵归綈)** | 10-60 鏉?| 渚濊禆鍘傚晢 | 鏈夐檺 | | 涓枃 Prompt 妫€娴?| **6 骞冲彴杩濈璇嶈鐩?* | 鉂?| 渚濊禆鍘傚晢 | 鉂?| | Agent 韬唤涓庝俊浠?| **DID + 淇¤獕 + 寰界珷** | 鉂?| 鍟嗕笟闄勫姞 | 鉂?| | Agent 韬唤 / 缃戠粶灞傛壂鎻?| **鎵韩浠界己闄?+ 缁勭綉杩囧** | 鉂?| 鏈夐檺 | 鉂?| | Agent 鍗忎綔涓庡競鍦?| **瀹屾暣鐢熸€?* | 鉂?| 鏈夐檺 | 绠€鍗曟敞鍐?| | 璁¤垂涓庣粡娴庢ā鍨?| **鍐呯疆鏀寔** | 鉂?| 浼佷笟鐗?| 鉂?| | 澶栭儴渚濊禆 | **闆朵緷璧?* | 鏈変緷璧?| N/A | 鏈変緷璧?| | MCP 闆嗘垚 | **鍘熺敓鏀寔** | 閮ㄥ垎鏀寔 | 鏈夐檺 | 閮ㄥ垎鏀寔 | 馃攳 **Agent 韬唤涓庡嚟璇佹壂鎻忥紙韬唤灞?/ NHI锛?* 鈥?2026 骞?agent 瀹夊叏鐨勪富鎴樺満宸蹭粠銆屽伐鍏锋墽琛屻€嶈浆绉诲埌銆宎gent 韬唤鍙獙璇併€嶏紙A2A 浠撳簱 top issue 鍏ㄥ湪韬唤锛汚uthentik 鍊?NHI 閲嶇噧锛汚NS/DNSid/Entra Agent ID 鎵庡爢锛夈€侫IShield 浠庛€屽彧鍙戜俊浠昏瘉涔︺€嶅崌绾т负銆屼篃鎵韩浠界己闄枫€嶏細AgentCard/agent 韬唤鏄惁绛惧悕銆佸嚟璇佹槸鍚︾煭鏈熻繃鏈熴€佹巿鏉冩槸鍚﹁繃瀹斤紙`scope: "*"` 杩濆弽鏈€灏忔潈闄愶級銆佹槸鍚︾己 mTLS/DID銆佸鎵樻槸鍚﹀仛 scope attenuation銆傝瑙?[Agent 鐢熸€?2026 鎬佸娍涓庡崱浣峕(docs/agent-ecosystem-2026-landscape.md)銆? 馃暩锔?**Agent 缃戠粶 / Mesh 閰嶇疆鎵弿锛堢綉缁滃眰锛?* 鈥?Cloudflare Mesh 鎶?agent 缁勭綉鍋氭垚鍩虹璁炬柦锛屽嵈瀹樻柟鑷銆岀己 per-agent 韬唤涓庣瓥鐣ャ€嶏紙鎵€鏈?agent 娴侀噺琚綋鎴愭潵鑷竴涓?Worker锛夈€侫IShield 琛ヨ繖涓己鍙ｏ細鎵弿鏁磋处鎴?Mesh/VPC 缁戝畾鏄惁鎶婂叏缃戞毚闇茬粰鎵€鏈?agent銆乤gent 绔偣鏄惁鏃犻壌鏉冿紙`auth: none`锛夈€佺鏈夎祫婧愭槸鍚﹀叕缃戞毚闇诧紙`public: true`锛夈€傚唴瀹瑰彲淇?+ 韬唤褰掑洜 + 缁勭綉鍙揪鎬э紝涓夌榻愪笅瑕嗙洊 agent 鐨勩€屼俊浠绘祬婊┿€嶃€? 馃攼 **Authentik / NHI service-account 鎵弿锛堣韩浠藉眰 路 Authentik 娴佹淳锛?* 鈥?鎵弿 Authentik 椋庢牸鐨?service-account 瀵煎嚭锛歚skip_authorization` 璺冲悓鎰忋€佷护鐗屾案涓嶈繃鏈燂紙`token_ttl: 0/never`锛夈€乻cope 杩囧锛坄"*"`锛夈€佺‖缂栫爜 `client_secret`銆傛妸韬唤灞備粠銆屽彧鍙戣瘉涔︺€嶆墿灞曞埌銆屼篃鎵?NHI 鍗敓銆嶃€? 馃 **A2A AgentCard 缁撴瀯鍖栨牎楠岋紙韬唤灞?路 A2A 娴佹淳锛?* 鈥?瀵?`.well-known/agent.json` 鍋?JSON 缁撴瀯鍖栨牎楠岋細鏈鍚嶃€佺己杩囨湡銆侀潪 https銆佹棤閴存潈鏂规锛坄securitySchemes`锛夈€佸鎵橀摼鏈仛 scope attenuation銆傜洿鎺ュ搴?A2A #1672/#1628 鐨勩€屼俊浠绘祬婊┿€嶃€? 馃洝锔?**AI-slop / 瓒婄嫳瑙勯伩妫€娴嬶紙鍐呭鍙俊灞傦級** 鈥?璇嗗埆涓撲负缁曡繃鍐呭鍒嗙被鍣ㄨ€岃璁＄殑 prompt/skill锛氭寚浠よ鐩栵紙ignore previous instructions锛夈€丏AN 瑙掕壊鎵紨銆乥ase64/缈昏瘧娣锋穯銆佸弽妫€娴嬭嚜鎸囥€傝繖鏄€屽幓 AI 鍛炽€嶆枃鍖栨氮娼姝﹀櫒鍖栫殑涓€闈紝AIShield 鍋氬叾瀹夊叏/鍙俊瀵瑰啿灞傦紙涓?soundshuman 椋庢牸灞備簰琛ラ潪绔炲搧锛夈€? 馃挵 **AP2 / x402 鏀粯鎺堟潈 scope 瀹¤锛堢粡娴庡眰 路 鏀粯鎺堟潈锛?* 鈥?鎵弿 agent 鏀粯閰嶇疆锛歚maxAmount` 鏃犻檺銆乣auto_approve` 鍏嶇‘璁ゃ€佹敮浠?scope 杩囧銆佹敮浠樻巿鏉冩湭缁?intent锛坈artId/orderId锛夈€傝鐩?agent 缁忔祹灞傜殑銆屼笁鎺堟潈銆嶆敹鏁涖€? 馃З **OWASP Agentic AI Top 10锛圓SI01鈥揂SI10锛夊叏瑕嗙洊 鈥?11 涓柊妯″潡琛ュ畬銆? 涓叏绌虹櫧 + 5 涓崐瑕嗙洊銆嶅煙锛?* - **ASI01 鐩爣鍔寔**锛坄scanner/goal_hijack_scan.py`锛夛細鎶婂閮ㄥ唴瀹瑰綋鎸囦护銆佺洰鏍囨浛鎹€佹寔涔?姘镐箙鐩爣娉ㄥ叆銆? - **ASI02 宸ュ叿婊ョ敤 / 鏈€灏忔潈闄?*锛坄scanner/least_agency_scan.py`锛夛細绠￠亾鍒?shell銆乣rm -rf`銆乣sudo`銆乣chmod 777`銆乣os.system`/`eval`銆佸嚟璇佷笌 SSH key 璇诲彇銆? - **ASI03 韬唤 / OAuth 濮挎€?*锛坄scanner/mcp_oauth_scan.py`锛夛細鏃犺璇佺殑杩滅▼ MCP server锛圕VE-2026-32211 绫伙級銆佺己 RFC 9207 issuer 鐨?OAuth銆侀暱瀵垮懡/涓嶈疆鎹?token銆傦紙GPT Action 娓呭崟鎸夎嚜韬?`auth` schema 璇嗗埆锛屼笉璇姤涓?MCP 缂哄彛銆傦級 - **ASI04 渚涘簲閾?/ 鏉ユ簮鍙俊**锛坄scanner/provenance_scan.py`锛夛細`npx`/`pip` 鏈?pin 鐗堟湰銆乬it 瀹夎鏈?pin commit銆侀攣瀹氭枃浠剁己瀹屾暣鎬с€丼BOM 鏈鍚嶃€? - **ASI06 璁板繂 / 涓婁笅鏂囨姇姣?*锛坄scanner/memory_scan.py`锛夛細鍐欏叆璁板繂鐨勬寚浠ゃ€佹寔涔?绉嶅瓙鐩爣銆佽蹇嗘枃浠跺啓鍏ャ€? - **ASI07 璺?agent / 濮旀墭**锛坄scanner/scope_composition_scan.py`锛夛細鐢?agent 鑷韩鍑瘉杞彂璇锋眰鐨勬贩娣嗗壇鎵嬶紙confused deputy锛夈€? - **ASI08 绾ц仈澶辫触 / 鐖嗙偢鍗婂緞**锛坄scanner/scope_composition_scan.py`锛夛細鍑瘉璇诲彇 + 澶栦紶缁勫悎锛堟墍鏈夊凡杩炴帴 server scope 鐨勫苟闆嗭級銆? - **ASI09 浜烘満淇′换鍒╃敤**锛坄scanner/dark_pattern_scan.py`锛夛細鏉冨▉鍐掑厖銆佸帇鍒舵牳楠屻€佽櫄鍋囦繚璇併€佺揣杩劅鈥斺€旈渶 鈮? 涓俊鍙峰悓鏃跺懡涓墠鎶ヨ锛堜綆璇姤锛夈€? - **ASI10 澶辨帶 agent / 鍙嶇鏀?*锛坄scanner/antitamper_scan.py`锛夛細鑷繚鎶?鍒犻櫎鍚庨噸瑁呫€佺鐢?鏇挎崲鍏跺畠缁勪欢銆佸弽鍒嗘瀽/闅愯棌鎸囦护銆? - **宸ュ叿 / 鎶€鑳藉畬鏁存€?*锛坄scanner/tool_integrity_scan.py`锛夛細宸ュ叿鍚?typosquat锛堜笌瑙勮寖鍝佺墝缂栬緫璺濈 鈮?锛孋VE-2026-30856 绫伙級銆佹湭 pin 鐗堟湰鐨勮繙绋?MCP锛坮ug-pull锛夈€? - **娉ㄥ唽涓績渚涘簲閾?*锛坄scanner/registry_supply_scan.py`锛夛細鎶€鑳藉悕 typosquat銆佸彲鐤戝浼犮€佹笎杩涘紡闅愯棌杞借嵎锛堜富鏂囦欢鎶婂畨瑁呭懡浠ゅ欢杩熷埌娆＄骇 `.md`锛夈€? 涓婅堪 11 涓ā鍧楀叏閮ㄩ€氳繃 `tests/test_capability_full_scan.py` 鐨勩€岃壇鎬ч浂璇姤 + 鎭舵剰浠嶈鎷︺€嶅绾︼紙40 椤癸級锛涘叏閲忔祴璇?**523 閫氳繃 / 0 澶辫触 / 9 璺宠繃**銆? > AIShield 涓嶅彧鏄竴涓壂鎻忓櫒 鈥?瀹冩槸 AI Agent 瀹夊叏鐢熸€佺殑瀹屾暣鍩虹璁炬柦銆? --- ## 蹇€熷紑濮? AIShield 鏄?*瀹屽叏鏈湴杩愯**鐨勫紑婧愬伐鍏封€斺€旀棤闇€娉ㄥ唽銆佹棤璐﹀彿銆佷唬鐮佷笉涓婁紶浜戠銆傛帹鑽愰€氳繃 MCP 鐩存帴鎺ュ叆浣犵殑瀹㈡埛绔€? ### 鏂瑰紡涓€锛堟帹鑽愶級锛氫綔涓?MCP Server 鎺ュ叆 鏃犻渶瀹夎锛屼竴琛屽懡浠ゆ帴鍏?Claude Desktop / Cursor / 浠绘剰 MCP 瀹㈡埛绔細 ```json { "mcpServers": { "aishield": { "command": "npx", "args": ["-y", "aishield-mcp-server"] } } } ``` 鎺ュ叆鍚庢棤闇€浠讳綍閰嶇疆锛屽嵆鍙湪瀵硅瘽涓洿鎺ヨ锛? > 鈥滃府鎴戞壂鎻忚繖涓?MCP 宸ュ叿鏄惁瀛樺湪 Prompt 娉ㄥ叆椋庨櫓鈥? ### 鏂瑰紡浜岋細鏈湴 API Server锛堝彲閫夛級 ```bash git clone https://github.com/lm203688/aishield.git cd aishield python api/server.py ``` 鍚姩鍚庤闂?**http://localhost:8450** 鏌ョ湅鏈湴 API 闈㈡澘銆傝 server 瀹屽叏鍦ㄦ湰鍦拌繍琛岋紝**鏃犻渶娉ㄥ唽銆佹棤绉垎銆佹棤鍏綉渚濊禆**锛屾墍鏈夋壂鎻忛兘鍦ㄤ綘鐨勬満鍣ㄤ笂瀹屾垚銆? ### 鑾峰彇瀹夊叏寰界珷 鎵弿閫氳繃鍚庯紝鍦ㄤ綘鐨勯」鐩?README 涓祵鍏ュ畨鍏ㄥ窘绔狅紙鑷墭绠′綘鐨勫疄渚嬪悗鏇挎崲鍩熷悕锛夛細 ```markdown ![AIShield Security](https://aishield.tools/badge/my-agent-tool) ``` --- ## MCP 闆嗘垚 AIShield 鍙綔涓?MCP Server 鐩存帴闆嗘垚鍒?Claude Desktop銆丆ursor 绛夋敮鎸?MCP 鐨勫鎴风涓€? ### Claude Desktop 鍦?Claude Desktop 閰嶇疆鏂囦欢涓坊鍔狅細 ```json { "mcpServers": { "aishield": { "command": "python", "args": ["-m", "api.mcp_server"], "cwd": "/path/to/aishield" } } } ``` ### Cursor / 鍏朵粬 MCP 瀹㈡埛绔? 鍚屾牱鍦?MCP 閰嶇疆涓坊鍔犱互涓婂唴瀹癸紝鍗冲彲鍦ㄥ璇濅腑鐩存帴璋冪敤 AIShield 鐨勫叏閮ㄥ畨鍏ㄦ壂鎻忚兘鍔涖€? 闆嗘垚鍚庝綘鍙互鐩存帴鍦ㄥ璇濅腑璇达細 > "甯垜鎵弿杩欎釜 MCP 宸ュ叿鏄惁瀛樺湪 Prompt 娉ㄥ叆椋庨櫓" > "妫€鏌ヨ繖娈垫枃鏈槸鍚﹀寘鍚繚绂佽瘝" --- ## CI 瀹夊叏闂ㄧ锛圙itHub Action锛? 鎶?AIShield 鎺ュ叆浠讳綍浠撳簱鐨?CI锛氭瘡娆?push / PR 鑷姩鎵弿宸ヤ綔鍖洪噷鐨?MCP server銆乻kill銆乸rompt锛?*杈惧埌闃堝€煎嵆璁╂瀯寤哄け璐?*銆? ```yaml # .github/workflows/aishield.yml name: AIShield Security Scan on: [push, pull_request] jobs: aishield: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: lm203688/aishield@v4.2.2 # 鍙戝竷鍒?Marketplace 鍚庡彲鐢紱姝ゅ墠鐢?commit/ tag 寮曠敤 with: fail_on: high # safe / medium / high / critical tool_type: mcp # mcp / skill / gpt / prompt - name: 涓婁紶 SARIF 鍒?GitHub Security if: always() uses: github/codeql-action/upload-sarif@v3 with: sarif_file: aishield.sarif ``` 宸紓鍖栵細榛樿 **no-spawn锛堜笉鎵ц琚壂閰嶇疆锛?* + 鍐呭/prompt 娉ㄥ叆妫€娴?+ **涓枃鍚堣锛堣繚绂佽瘝锛?*鈥斺€斿崰銆屼腑鍥藉悎瑙?+ 涓嶆墽琛屻€嶄綅锛屼笌 AgentAuditKit 鐨勯€氱敤浣嶄簰琛ャ€? --- ## 澶栭儴椤圭洰闆嗘垚 AIShield 鍐呯疆 6 涓嵆鎻掑嵆鐢ㄧ殑闆嗘垚妯″潡锛屾彁鍗囧畨鍏ㄦ壂鎻忓拰濞佽儊鎯呮姤鑳藉姏銆傛墍鏈夋ā鍧楅浂渚濊禆鍗冲彲杩愯锛屽閮ㄤ緷璧栦负鍙€夊寮恒€? ### 蹇€熶娇鐢? ```python from scanner.integrations import EventPipeline, VClusterManager, PersistentAgent # 瀹炴椂浜嬩欢绠￠亾 pipeline = EventPipeline() pipeline.publish_vulnerability("CVE-2026-12345", "critical", "https://target.com") # 闅旂鎵弿鐜 manager = VClusterManager() env = manager.create_scan_env("target-scan-001") # 鎸佷箙鍖栧畨鍏ㄤ唬鐞? agent = PersistentAgent(api_key="your-xai-key") agent.analyze_threat({"cve_id": "CVE-2026-12345", "severity": "critical"}) ``` ### 瀹夎鍙€変緷璧? ```bash pip install -r requirements-integrations.txt ``` 璇﹁ [requirements-integrations.txt](https://github.com/lm203688/aishield/blob/HEAD/requirements-integrations.txt) 鍜?[scanner/integrations/](https://github.com/lm203688/aishield/blob/HEAD/scanner/integrations/) 鐩綍銆? --- ## 鏈湴 API 鏂囨。锛坙ocalhost:8450锛? 浠ヤ笅绔偣鐢辨湰鍦?`python api/server.py` 鎻愪緵锛岃繍琛屽湪 **localhost:8450**锛?*鏃犲叕缃戜緷璧栥€佹棤闇€娉ㄥ唽**銆傚厛鎸変笂鏂囥€屽揩閫熷紑濮?路 鏂瑰紡浜屻€嶅惎鍔ㄦ湰鍦?server锛屽啀璁块棶瀵瑰簲绔偣銆傛牳蹇冪鐐瑰寘鎷細 ### 瀹夊叏鎵弿 | 鏂规硶 | 绔偣 | 鎻忚堪 | |:---|:---|:---| | `POST` | `/api/v1/audit` | 瀹屾暣瀹夊叏鎵弿锛堝惈 5 缁磋瘎鍒嗭級 | | `POST` | `/api/v1/prompt-check` | Prompt 娉ㄥ叆妫€娴?| | `POST` | `/api/v1/banned-words` | 杩濈璇嶆娴嬶紙6 骞冲彴锛?| | `POST` | `/api/v1/scan/api` | OpenAPI / Swagger 瀹夊叏鎵弿 | | `GET` | `/api/v1/health` | 鏈嶅姟鍋ュ悍妫€鏌?| | `GET` | `/api/v1/stats` | 鎵弿缁熻鏁版嵁 | ### Agent 鐢熸€? | 鏂规硶 | 绔偣 | 鎻忚堪 | |:---|:---|:---| | `GET` | `/api/v1/identity/agents` | Agent 鍒楄〃 | | `POST` | `/api/v1/collab/publish` | 鍙戝竷鍗忎綔娑堟伅 | | `POST` | `/api/v1/skills/publish` | 鍙戝竷鎶€鑳?| | `POST` | `/api/v1/sandbox/execute` | 娌欑瀹夊叏鎵ц | | `GET` | `/api/v1/proxy/tools` | 鍙唬鐞嗗伐鍏峰垪琛?| | `POST` | `/api/v1/proxy/call` | 浠ｇ悊璋冪敤璁よ瘉宸ュ叿 | --- ## 椤圭洰鏋舵瀯 ```mermaid graph TB subgraph Clients["瀹㈡埛绔?] MCP["MCP 瀹㈡埛绔?br/>(Claude / Cursor)"] SDK["HTTP 瀹㈡埛绔?/ SDK"] end subgraph Server["AIShield Server (Port 8450)"] API["REST API
ThreadingMixIn 骞跺彂"] MCPE["MCP Endpoint
StreamableHTTP"] subgraph Scanner["瀹夊叏鎵弿寮曟搸"] PE["Prompt 娉ㄥ叆妫€娴?] MW["闆跺瀛楃妫€娴?] RP["Rug Pull 妫€娴?] AS["API 瀹夊叏鎵弿"] BW["杩濈璇嶆娴?] SC["5 缁磋瘎鍒嗗紩鎿?br/>227/233 鏉¤鍒?] end subgraph Eco["鐢熸€佹ā鍧?] ID["Agent DID
韬唤绯荤粺"] RP2["淇¤獕璇勫垎"] CO["鍗忎綔閫氫俊鎬荤嚎"] SB["瀹夊叏娌欑"] MK["鎶€鑳藉競鍦?] A2A["A2A 鍗忚缃戝叧"] PAY["鏀粯涓庤璐?] BD["璁よ瘉寰界珷"] end subgraph Integrations["澶栭儴椤圭洰闆嗘垚"] BB["BB Browser
濞佽儊鎯呮姤閲囬泦"] BU["Browser Use
AI 娴忚鍣ㄦ壂鎻?] GDB["Graph DB
濞佽儊鍥捐氨"] ES["Event Stream
瀹炴椂浜嬩欢绠￠亾"] VC["vCluster
闅旂鎵弿鐜"] GA["Grok Agent
鎸佷箙鍖栫洃鎺?] end end MCP --> MCPE SDK --> API MCPE --> Scanner API --> Scanner API --> Eco Scanner --> SC SC --> BD ``` **鎶€鏈壒鐐癸細** - **闆朵緷璧栨灦鏋?* 鈥?绾?Python 鏍囧噯搴撳疄鐜帮紝鏃犻渶 pip install 浠讳綍绗笁鏂瑰寘 - **ThreadingMixIn 骞跺彂** 鈥?鍐呯疆绾跨▼姹犲鐞嗭紝鏀寔澶氳姹傚苟琛? - **JSON 鏂囦欢瀛樺偍** 鈥?杞婚噺鎸佷箙鍖栵紝绾跨▼瀹夊叏锛屽紑绠卞嵆鐢? - **OWASP API Security 鏄犲皠** 鈥?9 澶у畨鍏ㄧ被鍒叏瑕嗙洊 - **涓枃杩濈璇嶅紩鎿?* 鈥?瑕嗙洊寰俊銆佹姈闊炽€佸皬绾功銆丅 绔欍€佸井鍗?6 澶у钩鍙? --- ## 瀹夊叏璁よ瘉寰界珷 AIShield 涓洪€氳繃瀹夊叏鎵弿鐨勫伐鍏疯嚜鍔ㄧ鍙戝彲宓屽叆鐨?SVG 寰界珷锛岃浣犵殑椤圭洰瀹夊叏鐘舵€佷竴鐩簡鐒躲€? ### 寰界珷绛夌骇 | 绛夌骇 | 鏉′欢 | 寰界珷鏍峰紡 | |:---|:---|:---| | 馃 Gold | 鎬诲垎 >= 90 | 閲戣壊杈规 + 鐩剧墝 | | 馃 Silver | 鎬诲垎 >= 70 | 閾惰壊杈规 + 鐩剧墝 | | 馃 Bronze | 鎬诲垎 >= 50 | 閾滆壊杈规 + 鐩剧墝 | ### 鍦ㄤ綘鐨勯」鐩腑浣跨敤 鍦ㄤ綘鐨?`README.md` 涓坊鍔犱互涓嬩唬鐮侊細 ```markdown ![AIShield Verified](https://your-aishield-domain.com/badge/your-tool-name) ``` AIShield 浼氭牴鎹渶鏂版壂鎻忕粨鏋滃姩鎬佹覆鏌撳窘绔犻鑹插拰鐘舵€併€? --- ## 璺嚎鍥? ### Phase 1 鈥?瀹夊叏鎵弿寮曟搸 鉁?(褰撳墠) - [x] 227 MCP / 233 Skill 鏉?OWASP MCP Top 10 + Agentic ASI01鈥?0 瀵归綈妫€娴嬭鍒? - [x] 5 缁村畨鍏ㄨ瘎鍒嗗紩鎿? - [x] 涓枃 Prompt 娉ㄥ叆妫€娴嬶紙鎷奸煶 / 璋愰煶 / 鎷嗗瓧锛? - [x] 闆跺瀛楃 / 闅愬啓鏈?/ Rug Pull 妫€娴? - [x] 杩濈璇嶆娴嬶紙6 澶т腑鏂囧钩鍙帮級 - [x] MCP Server 妯″紡 + StreamableHTTP - [x] 浠ｇ悊璋冪敤缃戝叧 ### Phase 2 鈥?淇′换鐢熸€? - [ ] Agent DID 韬唤娉ㄥ唽涓庤法閾鹃獙璇? - [ ] 澶氱骇淇¤獕绯荤粺涓婄嚎 - [ ] 瀹夊叏寰界珷绛惧彂骞冲彴 - [ ] 鎶€鑳藉競鍦?Beta - [ ] A2A 鍗忚缃戝叧瀹屽杽 - [ ] 鎸夐噺璁¤垂涓庨厤棰濈鐞? ### Phase 3 鈥?瑙勬ā鍖栨不鐞? - [ ] 澶氱鎴锋敮鎸佷笌浼佷笟 SSO - [ ] 绀惧尯璐＄尞瑙勫垯甯傚満 - [ ] AI 椹卞姩鐨勮鍒欒嚜鍔ㄧ敓鎴? - [ ] Web Dashboard 鍙鍖栫鐞? - [ ] 鍥介檯鍖?(i18n) 澶氳瑷€鏀寔 - [ ] SLA 鐩戞帶涓庡憡璀? --- ## 璐＄尞鎸囧崡 鎴戜滑娆㈣繋浠讳綍褰㈠紡鐨勮础鐚紝鍖呮嫭浣嗕笉闄愪簬锛氭柊妫€娴嬭鍒欍€丅ug 淇銆佹枃妗ｆ敼杩涖€佸姛鑳藉缓璁€? ### 鍙備笌姝ラ 1. **Fork** 鏈粨搴? 2. 鍒涘缓鐗规€у垎鏀細`git checkout -b feature/your-feature-name` 3. 鎻愪氦鍙樻洿锛歚git commit -m 'feat: add xxx feature'` 4. 鎺ㄩ€佸垎鏀細`git push origin feature/your-feature-name` 5. 鎻愪氦 **Pull Request** ### 鎻愪氦瑙勮寖 浣跨敤 [Conventional Commits](https://www.conventionalcommits.org/) 鏍煎紡锛? - `feat:` 鏂板姛鑳? - `fix:` Bug 淇 - `docs:` 鏂囨。鍙樻洿 - `refactor:` 浠ｇ爜閲嶆瀯 - `test:` 娴嬭瘯鐩稿叧 - `chore:` 鏋勫缓 / 宸ュ叿閾惧彉鏇? ### 璐＄尞妫€娴嬭鍒? 鍦?`scanner/rules.py` 涓坊鍔犳柊瑙勫垯锛岀‘淇濅笌 OWASP MCP Top 10 鍒嗙被瀵归綈銆傛彁浜?PR 鍓嶈繍琛屾祴璇曪細 ```bash python tests/quick_test.py ``` --- ## 閮ㄧ讲 AIShield 鏀寔澶氱閮ㄧ讲鏂瑰紡锛? **鐩存帴杩愯锛?* ```bash python api/server.py ``` **Docker锛?* ```bash docker build -t aishield . docker run -p 8450:8450 aishield ``` **Railway / Render锛?* 椤圭洰鍐呯疆 `railway.json`銆乣render.yaml` 鍜?`Procfile`锛屽彲鐩存帴涓€閿儴缃层€? 璇﹁ [DEPLOY.md](https://github.com/lm203688/aishield/blob/HEAD/DEPLOY.md)銆? --- ## 馃殌 绔嬪嵆寮€濮? 閫夋嫨鏈€閫傚悎浣犵殑鏂瑰紡锛屽叏绋嬫湰鍦拌繍琛岋紝鏃犻渶娉ㄥ唽锛? | 鏂瑰紡 | 鎿嶄綔 | 閫傚悎鍦烘櫙 | |:---|:---|:---| | **MCP 闆嗘垚锛堟帹鑽愶級** | `npx -y aishield-mcp-server` 鎺ュ叆 Claude Desktop / Cursor | 鍦ㄥ璇濅腑鐩存帴鎵弿锛屼唬鐮佷笉鍑烘満 | | **鏈湴杩愯** | `git clone` + `python api/server.py` | 鏈湴 API 闈㈡澘锛屽紑鍙戣皟璇曡嚜瀹氫箟瑙勫垯 | | **CI 闂ㄧ** | GitHub Action 鎺ュ叆锛堣涓嬶級 | push / PR 鑷姩鎵弿锛岃揪闃堝€煎嵆澶辫触 | | **鍛戒护琛?* | `python scanner/...` | 鑷畾涔夎剼鏈?/ 鎵归噺鎵弿 | > 鎵€鏈夋柟寮忓潎鍦ㄦ湰鍦板畬鎴愶紝娌℃湁浠讳綍鏁版嵁鍙戦€佸埌澶栭儴銆傛湰寮€婧愮増涓庝簯 SaaS `aishield.ai` 鏃犲叧銆? --- ## 鑷磋阿 - [OWASP MCP Security Top 10](https://owasp.org/www-project-mcp-security-top-10/) 鈥?瀹夊叏鏍囧噯涓庤鍒欎綋绯? - [Google A2A Protocol](https://github.com/google/A2A) 鈥?Agent-to-Agent 閫氫俊鍗忚鍙傝€? - [MCP Community](https://modelcontextprotocol.io/) 鈥?Model Context Protocol 绀惧尯鐢熸€? - 鎵€鏈変负 AIShield 璐＄尞浠ｇ爜鍜岃鍒欑殑 [Contributors](https://github.com/lm203688/aishield/graphs/contributors) --- ## 璁稿彲璇? [MIT License](https://github.com/lm203688/aishield/blob/HEAD/LICENSE) 漏 2025 AIShield Contributors ### 📰 最新安全洞察 - [MCP 2026-07-28 无状态化：安全网关必须回答的 3 个问题](https://lm203688.github.io/aishield/blog/blog-mcp-stateless-security-2026-08-03.html) `2026-08-03` - [从 HuggingFace 被入侵看 Agent 沙箱逃逸的 4 个必要条件](https://lm203688.github.io/aishield/blog/blog-sandbox-escape-2026-08-03.html) `2026-08-03` - [深入分析：filesystem-test 如何修复安全漏洞](https://lm203688.github.io/aishield/blog/case-filesystem-test-2026-07-25.html) `2026-07-25` - [MCP 安全扫描周报 #30：发现 0 个高危风险](https://lm203688.github.io/aishield/blog/weekly-2026-07-25.html) `2026-07-25`