Triageshield
Verify a vuln report's file/line/function claims against a real GitHub repo.
- Transport
- Not stated
- Package
- —
- Registry id
- com.edgethirteen.www/triageshield
No install snippet on purpose. A working MCP config is a command, its arguments and an environment block — the last two are where API keys live, so this catalogue never stores them and cannot publish them. Follow the link above for the authors' own instructions.
TriageShield mechanically checks every concrete claim in a vulnerability report against the real current state of a GitHub repository, with no LLM judging the verdict. The tool catches fabricated vulnerability reports before a human triages them. It extracts concrete claims such as file paths, line numbers, and function names from the report text using pattern matching, then checks each against the repo's real tree and file contents via the GitHub API.
The same input always produces the same verdict. The free check works only on public GitHub repos. The Team plan supports a GitHub token for private-repo access.
The tool is available via subscription at $19 per month for the Team plan.
Summary drafted from the project's own website. Every sentence is backed by text on that page and was reviewed before publishing.