Security Audit

To find command injection vulnerabilities in bash scripts, scan for unquoted variables, unsafe eval, and exec patterns. This security audit checks hook and utility scripts to surface and remediate these risks before deployment.

A path traversal safeguard validates and sanitizes user-controlled paths to prevent unauthorized directory access. The audit reviews script inputs across Review and Validation phases to ensure no traversal exploits remain.

To prevent data leakage in script logging, verify that scripts do not output tokens or sensitive data. The audit enforces safe logging practices across all repository scripts to secure execution outputs.

Yes, you can use this security audit to review MCP configurations. It explicitly validates server registrations to ensure they are pinned and safe against potential injection or manipulation attacks.

You need to run a security audit on repository scripts during the Review and Validation phases of your workflow. This ensures bash variable quoting and explicit validation are enforced before integration.