使用MEDUSA扫描代理仓库中的仓库污染、不安全的AI配置文件和MCP攻击面
Run a focused preflight scan over agent and MCP repositories to catch poisoned instruction files, dangerous configs, and AI-specific supply-chain risks before merge or deployment.
Prerequisites
Python 3 environment, pip, MEDUSA package, access to the local repo or target GitHub repository, and optional external linters for expanded coverage
Installation
Use the upstream install or setup path that matches your environment:
- pip install medusa-security
- git clone https://github.com/1991513ccie-png/skills
- pip install -e ".[dev]"
Requirements and caveats from upstream:
-
- | --quick | Quick scan (changed files only, requires git) |
- name: Set up Python
Basic usage or getting-started notes:
- ## 🚀 Quick Start
- bash
- # Run your first scan - that's it!
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/Pantheon-Security/medusa/HEAD/README.md
Documentation
- https://github.com/1991513ccie-png/skills
