1. Conduid
  2. Security
  3. Dvah
MCP server · Security

Dvah

· github.com/avishayil/dvah

DVAH — Damn Vulnerable Agent Harness: a patch-the-runtime security lab for AI-agent platforms. Exploit a real architectural bug, trace it, patch the harness, and prove the security invariant holds.

Unclaimed agent-securityai-agentsappsecllmmcpnextjspythonsecuritysecurity-training
InstallView source
34Low

Scored 8 hours ago · breakdown

About Dvah

Dvah is an MCP server in the Security category: dVAH — Damn Vulnerable Agent Harness: a patch-the-runtime security lab for AI-agent platforms. Exploit a real architectural bug, trace it, patch the harness, and prove the security invariant holds. It has been installed 0 times through Conduid.

Install

Clone
git clone https://github.com/avishayil/dvah

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Dvah

Powered by Claude · Grounded in docs

I know everything about Dvah. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.
Questions

About Dvah

How do I install Dvah?

Run git clone https://github.com/avishayil/dvah, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Dvah safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Dvah still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.