coldpass

Browse / MCP servers

andriikhanin/mcp-agent-security-test-suite

Independent offline test suite for synthetic MCP agent security scenarios and protocol-contract checks.

  • MCP
  • security
  • local-first

Works.Tested on 2026-10-28. From the README alone, on Linux with Luna.

Share card: andriikhanin/mcp-agent-security-test-suite works
The card X shows when you post.Download

What we checked

Does it run from the README?Yes. Running in 0:40 on a clean Linux box.The run
Does it do what the README says?1 of 1 claims held up.Evidence

“The tool is an offline synthetic contract-testing tool”

Expected PASS. Got "status": "PASS".

Which setups did we try?Works with Luna. Unverified with Haiku.Setups

Linux / Haiku: unverified, Oct 28, rev a47087a. Linux / Luna: works, Oct 28, rev a47087a.

Needs keys, a login or a browser?No.Details

None seen

Is it safe to run?Looked for credential-like files that were not there: nothing was readWhat we saw

Review signals across current setups: sensitive read. 4 static matches retained as context.

A repository process attempted to read this sensitive path. 154 distinct locations. 154 findings. 157 attributed processes.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written; read only test files inside the test workspace or its temporary folders.

Full event, path and process lists for each observed setup:

A quiet run is not a safety guarantee.

Is it maintained?Maintained · 165 commits in 90 days · 158 merged PRs in 90 days · 13 open issues · 0 open PRsActivity

actively maintained: last commit 0 days ago; 165 commits and 158 merged PRs in 90 days; 13 open issues, 0 open PRs; no releases

Recent commits on GitHub

Can I show this on my README?Copy the badge.Badge
![coldpass](https://coldpass.dev/badge/andriikhanin--mcp-agent-security-test-suite.svg)

The run

Oct 28 · rev a47087a
0:000:300:40

Independent test, not endorsed by the project.