About Security Advisor
Security Advisor is an MCP server in the Security category: an oss tools based MCP server framework to analyze source code for security vulnerabilities. It runs SAST, SCA, DAST, and IaC inspection on the repository contents.
Install
From source
git clone https://github.com/adityabyreddy/security-advisorThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (8)
security_advisor_skill**Master skill** — runs SAST, SCA, IaC and optional container scans in parallel, exports a unified SARIF report
Parameters not published.
security_container_skillContainer image security scan via **DockerScan v2.0** (CIS benchmark, secrets, CVEs, supply-chain, runtime)
Parameters not published.
security_gemini_code_review_skillAI-powered code review via **Gemini CLI** — reviews branch diff and returns `vulnerability_schema.json`-compatible JSON
Parameters not published.
security_gemini_publish_to_vulnerability_manager_skillRuns Gemini code review, converts findings to `vulnerability_schema.json` payload, and uploads to Vulnerability Manager
Parameters not published.
security_iac_scan_skillInfrastructure-as-Code misconfiguration scan via **Trivy** (Terraform, K8s, Docker)
Parameters not published.
security_publish_to_vulnerability_manager_skillRuns SAST/SCA/IaC/container scans, converts findings to `vulnerability_schema.json` payload, and uploads to Vulnerability Manager
Parameters not published.
security_sast_skillStatic Application Security Testing via **Semgrep**
Parameters not published.
security_sca_skillSoftware Composition Analysis via **Trivy** (dependency vulnerabilities)
Parameters not published.
Ask AI
✦
Ask AI about Security Advisor
Powered by Claude · Grounded in docs
I know everything about Security Advisor. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.