1. Conduid
  2. Social
  3. Vulconcern
MCP server · Social

Vulconcern

by · github.com/cherryswlo/vulconcern

The Nx s1ngularity attack used your own AI CLI to steal credentials via a postinstall script. Offline, read-only scanner for tampered configs, MCP endpoints, credential files, and shell profiles. Zero deps.

Unclaimed ai-toolsgomcpsecuritysupply-chain-security
InstallView source
34Low

Scored 28 days ago · breakdown

About Vulconcern

Vulconcern is an MCP server published by cherryswlo in the Social category: the Nx s1ngularity attack used your own AI CLI to steal credentials via a postinstall script. Offline, read-only scanner for tampered configs, MCP endpoints, credential files, and shell profiles. Zero deps.

Install

From source
git clone https://github.com/cherryswlo/vulconcern

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Vulconcern

Powered by Claude · Grounded in docs

I know everything about Vulconcern. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Vulconcern

How do I install Vulconcern?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Vulconcern safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Vulconcern still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.