Security / AI Security

Most popular MCP servers mix untrusted-input tools and action tools

A research writeup from AgentSploit analyzing 1,384 tools across 28 MCP servers, highlighting how tool descriptions, source tools, and sink tools create an attack surface for agents.

Clear25/30
Useful23/30
Specific14/20
Complete12/20
Most popular MCP servers mix untrusted-input tools and action tools screenshot

Why it was accepted

The page clearly describes an AI/security-related project with a concrete purpose, reproducible harness, and specific findings drawn from a large survey of MCP servers. It is useful for AI builders and security practitioners working with agents and MCP tooling.

Weakness

This snapshot is a single markdown research page; it does not show the broader project navigation, package docs, or a complete product overview. A visitor cannot tell from this page alone how mature the framework is, what outputs the tooling produces, or how to use the survey workflow beyond the listed commands.

Review status

4 days ago #2433 ↓ -1

Last evaluated 4 days ago. Current rank #2433. Down 1 spot in the rankings.

Score history

74

Related listings

Snyk Agent Scan screenshot

Security / Agent Security

Open-source security scanner for AI agents, MCP servers, and agent skills. It auto-discovers installed agent components and checks them for prompt injection, tool poisoning, secrets, malware payloads, and related risks.

Vigil screenshot
#15 Vigil
91

Security / Penetration Testing

An AI harness for long-running penetration tests, bug bounties, and code audits. It combines specialist agents, a Kali runtime, durable state, and second-agent verification for findings.

Cynative screenshot
#17 Cynative
91

Security / Cloud Security

Open-source security agent framework for cloud, code, and runtime. It ships 45 built-in agents for AWS, GCP, Azure, Kubernetes, GitHub, and GitLab, and lets users create custom agents in a single markdown file.

Xalgorix screenshot
#84 Xalgorix
90

Security / Penetration Testing

Self-hosted AI security testing platform for authorized pentesting and bug bounty workflows, with a local web UI, live agent telemetry, verified findings, and branded PDF reports.