MCP security server for AI coding agents. 14 tools: workspace auto-exec audit (pre-open repo scan that defends against fake-interview / take-home-test malware), known compromised package detection, AI code review, pre-install guardian, AI hallucination guard, dead dependency detection, vulnerability audit, CycloneDX 1.6 SBOM generation. Curated advisory database. Zero dependencies. Works with Claude, Cursor, Windsurf.