1. Conduid
  2. Security
  3. io.github.dingdawg/dingdawg-code-review
MCP server · Security

io.github.dingdawg/dingdawg-code-review

AI code review — security, quality, performance. Learns your patterns. Receipted.

Unclaimed security
37Low

Scored 6 months ago · breakdown

About io.github.dingdawg/dingdawg-code-review

io.github.dingdawg/dingdawg-code-review is an MCP server in the Security category: aI code review — security, quality, performance. Learns your patterns. Receipted.

Install

Claude Code
claude mcp add io-github-dingdawg-dingdawg-code-review -- npx -y dingdawg-code-review
npx
npx -y dingdawg-code-review

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about io.github.dingdawg/dingdawg-code-review

Powered by Claude · Grounded in docs

I know everything about io.github.dingdawg/dingdawg-code-review. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

ISG Agent 1

CI

Governance from Day 1. A security-hardened, governance-first autonomous AI agent platform.

ISG Agent 1 proves that autonomous AI agents can be both powerful and safe. While other agent platforms bolt on security as an afterthought, ISG Agent 1 bakes governance into every layer from the start.

7 Innovations No Other Agent Has

Innovation What It Does
Agent Constitution Machine-enforced behavioral contract -- not guidelines, a verified contract
Adversarial Self-Testing The agent red-teams itself in production on a schedule
Time-Locked Actions Mandatory cooling period before dangerous operations (30-60s)
Trust Ledger Transparent, cryptographic reputation tracking for every action
Explain Mode Cryptographic proof of why every decision was made
Skill Reputation Community-verified trust scores for agent skills
Separation of Powers Critical actions require approval from independent agent or human

Security Comparison

ISG Agent 1 was built as a direct response to the security failures in existing agent platforms. Where others have exposed instances, malicious skills, and no audit trails, ISG Agent 1 has localhost-only defaults, skill quarantine, and hash-chained audit logs.

Quickstart

git clone https://github.com/InnovativeSystemsGlobal/isg-agent-1.git
cd isg-agent-1

cd gateway
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt

cp ../.env.example ../.env
cp ../config/agent.example.yaml ../config/agent.yaml

python -m isg_agent

The gateway starts on http://localhost:8900 by default (localhost-only).

Architecture

User (Discord/Telegram/Web)
  -> Bridge (TypeScript, normalizes messages)
  -> Gateway (Python/FastAPI, governance engine)
     -> Constitution check
     -> Governance gate (PROCEED/REVIEW/HALT)
     -> Audit trail (SHA-256 hash chain)
     -> Brain (LLM + convergence guarantees)
     -> Skills (sandboxed, quarantined, reputation-scored)
  -> Response (governed, explained, audited)

See ARCHITECTURE.md for the full architecture overview.

Documentation

Contributing

See CONTRIBUTING.md for contribution guidelines.

Security

See SECURITY.md for our responsible disclosure policy.

License

MIT License. See LICENSE for details.

Innovative Systems Global. The name is not aspirational. It is a statement of fact.

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About io.github.dingdawg/dingdawg-code-review

How do I install io.github.dingdawg/dingdawg-code-review?

Run claude mcp add io-github-dingdawg-dingdawg-code-review -- npx -y dingdawg-code-review, then add the server to your MCP client's configuration.

Is io.github.dingdawg/dingdawg-code-review safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.dingdawg/dingdawg-code-review still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.