1. Conduid
  2. Agents
  3. Cfgaudit
MCP server · Agents

Cfgaudit

by · github.com/cfgaudit/cfgaudit

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

Unclaimed agent-securityagentic-aiai-agentsai-securityclaudeclaude-codecopilotcursordevsecopsgemini-cligomcpmodel-context-protocolowaspprompt-injectionsarifsecuritysecurity-auditstatic-analysissupply-chain-security
InstallView source
34Low

Scored 14 days ago · breakdown

About Cfgaudit

Cfgaudit is an MCP server published by cfgaudit in the Agents category: static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.

The repository has 8 stars and 0 forks, with the last commit 12 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/cfgaudit/cfgaudit

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Cfgaudit

Powered by Claude · Grounded in docs

I know everything about Cfgaudit. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v1.15.0v1.15.0 · 5 Oct 2026Changelog 3473a68ebdb7956184c16b993fcbc7f639e0e77b build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 (#592) 3ec0c6cfe5fed8b523a69483fa312b37c2241fa7 build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#593)…
v1.14.0v1.14.0 · 16 Sep 2026Changelog 5418e5860243d994f53f8b68fbdca3c050c0ca0a build(deps): bump anchore/sbom-action from 0.24.0 to 0.24.2 (#578) f7423f7f8b45cd6dbe92274267d3eb352e0f2132 build(deps): bump anchore/sbom-action/download-syft (#577)…
v1.13.0v1.13.0 · 23 Aug 2026Changelog 6d57ffd917ddb65c6844fa0c837febfd53391b27 build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 (#528) 8f8c8dae1bc18e73f8408b120d26e4291218e457 feat: add CFG103 for a committed config that disables or rewrites…
v1.12.1v1.12.1 · 16 Aug 2026Changelog 6cbddb54e1ef6e514a8ba8e9111e43a348ab8da7 feat: report CFG101 once per permission list, not once per entry (#518) 129dd341daae238e7ca66001d555c8afffbfb4c3 fix: map CFG071 to AVE-2026-00073, which names it outright (#516)
v1.12.0v1.12.0 · 14 Aug 2026Changelog 6e4c1157f141bb35641b7d79116f6539b5d07060 build(deps): bump docker/login-action from 4.4.0 to 4.6.0 (#461) 28a16868d2c665bbcc84782573e0492a3a274cd2 feat: add CFG098 for unpinned plugin sources in marketplace.json (#488)…
Questions

About Cfgaudit

How do I install Cfgaudit?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Cfgaudit safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Cfgaudit still maintained?

Yes — the latest release is v1.15.0 (5 Oct 2026), and the last commit was 12 days ago. The repository has 8 stars.