1. Conduid
  2. Files
  3. Phantom
MCP server · Files

Phantom

by · github.com/r3dlight/phantom

Forensic CLI for AI-era supply-chain attacks: XZ tarball diffs, prompt injection scans, MCP/CLAUDE.md/Cursor config audits. SARIF for GitHub Code Scanning.

Unclaimed ai-agentsai-securityclaude-codemcp-securityprompt-injectionrust-clisarifsastsupply-chain-attackssupply-chain-securitytarball-diffxz-backdoor
InstallView source
34Low

Scored 2 hours ago · breakdown

About Phantom

Phantom is an MCP server published by r3dlight in the Files category: forensic CLI for AI-era supply-chain attacks: XZ tarball diffs, prompt injection scans, MCP/CLAUDE.md/Cursor config audits. SARIF for GitHub Code Scanning.

The repository has 5 stars and 0 forks, with the last commit 2 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/r3dlight/phantom

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Phantom

Powered by Claude · Grounded in docs

I know everything about Phantom. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Phantom

How do I install Phantom?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Phantom safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Phantom still maintained?

Yes — the last commit was 2 months ago. The repository has 5 stars and 0 forks.