correctover-scan 1.3.0 → 1.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -0
- package/index.js +5 -1
- package/package.json +15 -12
package/README.md
CHANGED
|
@@ -82,6 +82,20 @@ Try the online version: [correctover.com/scan](https://correctover.com/scan/)
|
|
|
82
82
|
- **OWASP AISVS 1.0** — AI System Vulnerability Severity
|
|
83
83
|
- **GB/T《智能体应用安全基本要求》** — Chinese National Mandatory Standard
|
|
84
84
|
|
|
85
|
+
## Manual audit
|
|
86
|
+
|
|
87
|
+
The free automated scan covers surface-level configuration checks. A manual Correctover audit goes deeper:
|
|
88
|
+
|
|
89
|
+
- **116 semantic intent rules** — reviewers trace what each MCP tool can actually be made to do, not just whether a config field is present
|
|
90
|
+
- Findings grounded in **real MCP ecosystem CVEs**
|
|
91
|
+
- **5-day turnaround**, delivered as a PDF report with recommended fixes
|
|
92
|
+
- A **free 1-page summary** of your configuration first — you decide whether to continue after reading it
|
|
93
|
+
|
|
94
|
+
For first customers, if the manual audit finds no critical-severity issue, you pay nothing.
|
|
95
|
+
|
|
96
|
+
- Get your free 1-page summary: email [234114134@coze.email](mailto:234114134@coze.email?subject=Free%20audit%20scan%20summary)
|
|
97
|
+
- Learn more about the manual audit: https://dshcorrectover.github.io/agent-audit/
|
|
98
|
+
|
|
85
99
|
## Links
|
|
86
100
|
|
|
87
101
|
- [correctover.com](https://correctover.com) — AI Agent Runtime Assurance
|
package/index.js
CHANGED
|
@@ -12,7 +12,7 @@ const path = require('path');
|
|
|
12
12
|
const { runScan, parseConfig, KNOWN_CONFIG_PATHS } = require('./core/scanner');
|
|
13
13
|
const { recordCall, getUpgradeMessage } = require('./core/license');
|
|
14
14
|
|
|
15
|
-
const VERSION = '1.
|
|
15
|
+
const VERSION = '1.3.1';
|
|
16
16
|
const PRODUCT = 'correctover-scan';
|
|
17
17
|
|
|
18
18
|
// Colors
|
|
@@ -124,6 +124,10 @@ function formatResults(results, stats, filename) {
|
|
|
124
124
|
lines.push('');
|
|
125
125
|
lines.push(`${c.dim}Web: https://correctover.com/scan/ | GitHub: https://github.com/Correctover${c.reset}`);
|
|
126
126
|
|
|
127
|
+
// Manual audit CTA
|
|
128
|
+
lines.push('');
|
|
129
|
+
lines.push(`${c.dim}Free automated scan covers surface-level checks. A manual Correctover audit goes deeper: 116 semantic intent rules, 5-day turnaround, findings grounded in real MCP ecosystem CVEs. First customers: if we find no critical-severity issue, you pay nothing. \u2192 ${c.cyan}https://dshcorrectover.github.io/agent-audit/${c.reset}`);
|
|
130
|
+
|
|
127
131
|
return lines.join('\n');
|
|
128
132
|
}
|
|
129
133
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "correctover-scan",
|
|
3
|
-
"version": "1.3.
|
|
4
|
-
"description": "
|
|
3
|
+
"version": "1.3.1",
|
|
4
|
+
"description": "Correctover Security Scanner — CCS audit for MCP configurations. Detects RCE, SSRF, credential hijacking against OWASP AISVS 1.0.",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"bin": {
|
|
7
7
|
"correctover-scan": "./index.js"
|
|
@@ -12,24 +12,27 @@
|
|
|
12
12
|
},
|
|
13
13
|
"keywords": [
|
|
14
14
|
"mcp",
|
|
15
|
+
"mcp-security",
|
|
16
|
+
"agent-security",
|
|
17
|
+
"ai-security",
|
|
18
|
+
"runtime-security",
|
|
15
19
|
"security",
|
|
16
20
|
"scanner",
|
|
17
|
-
"agent",
|
|
18
|
-
"ai",
|
|
19
21
|
"owasp",
|
|
20
22
|
"aisvs",
|
|
23
|
+
"owasp-aisvs",
|
|
21
24
|
"ccs",
|
|
22
25
|
"correctover",
|
|
23
|
-
"
|
|
24
|
-
"cursor",
|
|
25
|
-
"model-context-protocol",
|
|
26
|
-
"vulnerability",
|
|
27
|
-
"audit",
|
|
28
|
-
"runtime-security",
|
|
26
|
+
"vulnerability-scanner",
|
|
29
27
|
"rce-detection",
|
|
30
28
|
"ssrf-detection",
|
|
31
29
|
"credential-hijacking",
|
|
32
|
-
"
|
|
30
|
+
"self-healing",
|
|
31
|
+
"audit",
|
|
32
|
+
"guardrail",
|
|
33
|
+
"claude",
|
|
34
|
+
"cursor",
|
|
35
|
+
"model-context-protocol"
|
|
33
36
|
],
|
|
34
37
|
"author": "Correctover",
|
|
35
38
|
"license": "MIT",
|
|
@@ -50,4 +53,4 @@
|
|
|
50
53
|
"engines": {
|
|
51
54
|
"node": ">=16.0.0"
|
|
52
55
|
}
|
|
53
|
-
}
|
|
56
|
+
}
|