Python vulnerability scanner & MCP security toolkit. Real-time dependency checking via OSV/NVD/GitHub Advisory DBs, Docker analysis, secrets detection, MCP config validation, LLM-powered risk assessment & interactive security audits. Full CVE details, CVSS scores & remediation guidance.
This repository also configures its own agents. See what vulnicheck tells them →
MCP server Claude CodeCodexCursor +2
MCP server "vulnicheck" as configured in andrasfe/vulnicheck. Runs in Docker (docker.io/andrasfe/vulnicheck:main). Needs 7 environment variables to run.