1. Conduid
  2. RAG
  3. Sec Recon Agent
MCP server · RAG

Sec Recon Agent

by · github.com/Shurtug4l/sec-recon-agent

Type-safe LLM vulnerability triage on Pydantic AI + MCP. Ten typed tools (NVD, OSV, KEV, EPSS, Exploit-DB, ATT&CK, SBOM, Nmap) ground a validated TriageReport with a deterministic SSVC verdict. Red-team battery (MITRE ATLAS), reproducible scorecard, OWASP LLM + ISO 42001 mapping. Next.js frontend.

Unclaimed agentic-aiai-governanceai-securitycisa-kevcybersecurityepssfastapillmllm-evaluationmcpmitre-atlasnextjsprompt-injectionpydantic-aipythonragsbomssvcthreat-modelingvulnerability-management
InstallView source
34Low

Scored 6 days ago · breakdown

About Sec Recon Agent

Sec Recon Agent is an MCP server published by Shurtug4l in the RAG category: type-safe LLM vulnerability triage on Pydantic AI + MCP. Ten typed tools (NVD, OSV, KEV, EPSS, Exploit-DB, ATT&CK, SBOM, Nmap) ground a validated TriageReport with a deterministic SSVC verdict. Red-team battery (MITRE ATLAS), reproducible scorecard, OWASP LLM + ISO 42001 mapping. Next.js frontend.

The repository has 2 stars and 0 forks, with the last commit 25 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/Shurtug4l/sec-recon-agent

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Sec Recon Agent

Powered by Claude · Grounded in docs

I know everything about Sec Recon Agent. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.1.3v0.1.3 - audited · 22 Sep 2026Six pull requests from a September 2026 self-audit of the repository's own claims (#240-#245), plus the scorecard re-measured on the result. What changed for a consumer of the SBOM gate action Nothing is required. Two behaviours are worth…
v0.1.2v0.1.2 - locked install · 21 Sep 2026Upgrade from `v0.1.1` / `v0.1.0`: those tags no longer start.** They installed the gate's dependencies unlocked; the resolver now picks mcp 2.x, where `FastMCP` does not exist, and the gate dies at import with `ModuleNotFoundError: No…
v0.1.1v0.1.1 - Marketplace · 11 Jul 2026Publishes the **sec-recon SBOM gate** to the GitHub Marketplace. No behavioural change to the gate since `v0.1.0`. This release trims the `action.yml` description under the Marketplace 125-character limit and folds in the…
Questions

About Sec Recon Agent

How do I install Sec Recon Agent?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Sec Recon Agent safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Sec Recon Agent still maintained?

Yes — the latest release is v0.1.3 (22 Sep 2026), and the last commit was 25 days ago. The repository has 2 stars.