correctover-scan 1.2.1 → 1.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -17
- package/index.js +5 -1
- package/package.json +15 -7
package/README.md
CHANGED
|
@@ -82,31 +82,24 @@ Try the online version: [correctover.com/scan](https://correctover.com/scan/)
|
|
|
82
82
|
- **OWASP AISVS 1.0** — AI System Vulnerability Severity
|
|
83
83
|
- **GB/T《智能体应用安全基本要求》** — Chinese National Mandatory Standard
|
|
84
84
|
|
|
85
|
-
##
|
|
85
|
+
## Manual audit
|
|
86
86
|
|
|
87
|
-
|
|
87
|
+
The free automated scan covers surface-level configuration checks. A manual Correctover audit goes deeper:
|
|
88
88
|
|
|
89
|
-
|
|
89
|
+
- **116 semantic intent rules** — reviewers trace what each MCP tool can actually be made to do, not just whether a config field is present
|
|
90
|
+
- Findings grounded in **real MCP ecosystem CVEs**
|
|
91
|
+
- **5-day turnaround**, delivered as a PDF report with recommended fixes
|
|
92
|
+
- A **free 1-page summary** of your configuration first — you decide whether to continue after reading it
|
|
90
93
|
|
|
91
|
-
|
|
92
|
-
export CORRECTOVER_LICENSE_KEY=your-key-here
|
|
93
|
-
```
|
|
94
|
-
|
|
95
|
-
## Related Correctover Tools
|
|
94
|
+
For first customers, if the manual audit finds no critical-severity issue, you pay nothing.
|
|
96
95
|
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
| **Security Scanner** | `npx correctover-scan` | MCP config security audit (14 checks) |
|
|
100
|
-
| **Self-Healing Test** | `pip install correctover-test` | Agent self-healing test suite |
|
|
101
|
-
| **Vulnerability Scan** | `pip install correctover-security-audit` | 215 fault type scanner |
|
|
102
|
-
| **Compliance Check** | `pip install correctover-compliance-check` | OAuth 2.1 + CCS v1.0 |
|
|
103
|
-
| **Runtime Guard** | `pip install correctover-runtime-guard` | 22µs RCE/SSRF interception |
|
|
104
|
-
| **MCP Server** | `npm install correctover-mcp-server` | 6-dimension validation |
|
|
96
|
+
- Get your free 1-page summary: email [234114134@coze.email](mailto:234114134@coze.email?subject=Free%20audit%20scan%20summary)
|
|
97
|
+
- Learn more about the manual audit: https://dshcorrectover.github.io/agent-audit/
|
|
105
98
|
|
|
106
99
|
## Links
|
|
107
100
|
|
|
108
101
|
- [correctover.com](https://correctover.com) — AI Agent Runtime Assurance
|
|
109
|
-
- [CCS Standard](https://correctover.com/ccs) — Conformance Specification
|
|
102
|
+
- [CCS Standard](https://correctover.com/ccs) — Conformance Specification
|
|
110
103
|
- [Web Scanner](https://correctover.com/scan/) — Online version
|
|
111
104
|
- [GitHub](https://github.com/Correctover) — Source code
|
|
112
105
|
|
package/index.js
CHANGED
|
@@ -12,7 +12,7 @@ const path = require('path');
|
|
|
12
12
|
const { runScan, parseConfig, KNOWN_CONFIG_PATHS } = require('./core/scanner');
|
|
13
13
|
const { recordCall, getUpgradeMessage } = require('./core/license');
|
|
14
14
|
|
|
15
|
-
const VERSION = '1.
|
|
15
|
+
const VERSION = '1.3.1';
|
|
16
16
|
const PRODUCT = 'correctover-scan';
|
|
17
17
|
|
|
18
18
|
// Colors
|
|
@@ -124,6 +124,10 @@ function formatResults(results, stats, filename) {
|
|
|
124
124
|
lines.push('');
|
|
125
125
|
lines.push(`${c.dim}Web: https://correctover.com/scan/ | GitHub: https://github.com/Correctover${c.reset}`);
|
|
126
126
|
|
|
127
|
+
// Manual audit CTA
|
|
128
|
+
lines.push('');
|
|
129
|
+
lines.push(`${c.dim}Free automated scan covers surface-level checks. A manual Correctover audit goes deeper: 116 semantic intent rules, 5-day turnaround, findings grounded in real MCP ecosystem CVEs. First customers: if we find no critical-severity issue, you pay nothing. \u2192 ${c.cyan}https://dshcorrectover.github.io/agent-audit/${c.reset}`);
|
|
130
|
+
|
|
127
131
|
return lines.join('\n');
|
|
128
132
|
}
|
|
129
133
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "correctover-scan",
|
|
3
|
-
"version": "1.
|
|
4
|
-
"description": "
|
|
3
|
+
"version": "1.3.1",
|
|
4
|
+
"description": "Correctover Security Scanner — CCS audit for MCP configurations. Detects RCE, SSRF, credential hijacking against OWASP AISVS 1.0.",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"bin": {
|
|
7
7
|
"correctover-scan": "./index.js"
|
|
@@ -12,19 +12,27 @@
|
|
|
12
12
|
},
|
|
13
13
|
"keywords": [
|
|
14
14
|
"mcp",
|
|
15
|
+
"mcp-security",
|
|
16
|
+
"agent-security",
|
|
17
|
+
"ai-security",
|
|
18
|
+
"runtime-security",
|
|
15
19
|
"security",
|
|
16
20
|
"scanner",
|
|
17
|
-
"agent",
|
|
18
|
-
"ai",
|
|
19
21
|
"owasp",
|
|
20
22
|
"aisvs",
|
|
23
|
+
"owasp-aisvs",
|
|
21
24
|
"ccs",
|
|
22
25
|
"correctover",
|
|
26
|
+
"vulnerability-scanner",
|
|
27
|
+
"rce-detection",
|
|
28
|
+
"ssrf-detection",
|
|
29
|
+
"credential-hijacking",
|
|
30
|
+
"self-healing",
|
|
31
|
+
"audit",
|
|
32
|
+
"guardrail",
|
|
23
33
|
"claude",
|
|
24
34
|
"cursor",
|
|
25
|
-
"model-context-protocol"
|
|
26
|
-
"vulnerability",
|
|
27
|
-
"audit"
|
|
35
|
+
"model-context-protocol"
|
|
28
36
|
],
|
|
29
37
|
"author": "Correctover",
|
|
30
38
|
"license": "MIT",
|