Regex Safety Audit
Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites.
Servidor MCP · de tylerscomic-lab
Resumen
Regex Safety Audit es un servidor MCP publicado por tylerscomic-lab. Marketplaces que leemos y que lo publican: 1 (Official MCP Registry). Lo vimos por primera vez el 2026-10-11 y desde entonces no hemos registrado cambios. Según nuestra pasada por los marketplaces del 2026-10-18.
Qué pide
- Se ejecuta en remoto
Ninguno de los marketplaces que leemos publica sus herramientas ni los ajustes que pide.
Lo que declara, pide y ejecuta, completo
Instala solo plugins de desarrolladores en los que confíes. Mostramos lo que publican los marketplaces y no probamos plugins.
Funciona con
- Claude Code
- Codex
- Cursor
- VS Code
- Copilot CLI
Un enlace de un clic abre el cliente, que pide confirmación antes de añadir el servidor.
Según los marketplaces que lo listan y el transporte MCP que declara, tal como lo documenta cada cliente. No probamos plugins.
Conectar
Comandos y configuraciones generados solo a partir de lo que declaran sus marketplaces. No los ejecutamos por ti ni probamos plugins.
Como servidor MCP remoto
Generado a partir de lo que declara Official MCP Registry.
claude mcp add --transport http regex-safety-audit-mcp https://regex-safety-audit-mcp.mcpize.run/mcp[mcp_servers.regex-safety-audit-mcp]
url = "https://regex-safety-audit-mcp.mcpize.run/mcp"{
"mcpServers": {
"regex-safety-audit-mcp": {
"url": "https://regex-safety-audit-mcp.mcpize.run/mcp"
}
}
}Dónde está publicado
| Marketplace | Estado | Versión | Cifras | Verificado | Visto por primera vez |
|---|---|---|---|---|---|
| Official MCP Registry (Abrir el registro) | Publicado | 1.0.0 | Forks (GitHub): 0 Estrellas (GitHub): 0 |
Sin marca |
Cada cifra es del propio marketplace y nunca se suma entre marketplaces. Un marketplace que no publica cifras no muestra ninguna: sin número no es cero.
Qué cambió
Nada ha cambiado en este plugin desde que lo seguimos.
Plugins similares
Productos cuyos propios nombres, descripciones, herramientas y skills son los más cercanos a este por su significado, en todos los marketplaces que leemos. La cercanía se ordena solo dentro de esta lista.
-
Extract regular expressions from code, each with a ReDoS safety verdict.
-
Explain a regex in plain English and detect catastrophic backtracking risk.
-
Test regular expressions in a timeout-guarded worker, explain them, find catastrophic backtracking.
-
regex-mcp io.github.mrfentmen/regex-mcp
Test, describe, and validate regular expressions locally. No network and no key.
-
Test, validate and explain regular expressions with match highlighting. x402 micropayment.
-
code-pattern-risk-scanner io.github.lazymac2x/code-pattern-risk-scanner
Cloudflare Workers MCP server: code-pattern-risk-scanner
-
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
-
MCP Security & Vulnerability Auditor
Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
-
code-sentinel io.github.salrad22/code-sentinel
Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders
-
Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.
Plugins similares por marketplace
La misma pregunta a cada marketplace por separado: ¿hay allí un equivalente de este plugin?
Publicado en Claude Code: claude-plugins-community (5)
-
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prompt injection, data exfiltration, supply…
-
Security auditor for Node.js and Python backend APIs. Four skills cover pre-audit reconnaissance (route graph, auth matrix, invariants), static code audit across the OWASP API…
-
Automated security vulnerability scanner for Claude Code. Fetches CVE/CWE data from NIST NVD, scans code for vulnerable patterns across 9 languages (JS/TS, Python, Go, Java, Rust…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
claude-code-vulnerability-check
Detect CVE (Common Vulnerability Exposure) in PHP / JS project. Auto apply minor fixes and patch Alert on necessity of major update (prevent breaking changes)
Publicado en Claude Code: claude-plugins-official (5)
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
Publicado en Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
Keep your coding agent up to date with the latest web best practices
Publicado en Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
AI-powered code review in Codex, powered by CodeRabbit.
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
-
Inspect recent issues and events in Sentry from Codex.
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
Publicado en Community GitHub marketplaces (4)
-
Security auditor for Node.js and Python backend APIs. Four skills cover pre-audit reconnaissance (route graph, auth matrix, invariants), static code audit across the OWASP API…
-
PreToolUse security reminder hook for Claude Code. Catches 12 common security anti-patterns in Edit/Write/MultiEdit operations BEFORE they happen — command injection (exec…
-
skill-security
Security audit toolkit for Claude Code skills and plugins — detects prompt injection, backdoors, and permission escalation before installation
-
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
Publicado en Copilot CLI: github/awesome-copilot (5)
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
A comprehensive collection of specialized agents for software analysis, impact assessment, structural quality advisories, and architectural review using CAST Imaging.
-
Inspect a repository, improve Tiny Tool Town readiness, submit its listing issue, and launch remediation work.
-
Keep your coding agent up to date with the latest web best practices
Publicado en Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Navigate and interact with your C++ code using the Microsoft C++ Language Server.
-
Analyze MSVC build performance using vcperf.exe and ETL traces.
Publicado en Cursor: cursor/plugins (5)
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Build apps, scripts, and automations with the TypeScript SDK.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
-
playwright-mcp io.github.microsoft/playwright-mcp
Playwright Tools for MCP
-
Scaffold and validate new agent plugins.
Publicado en Docker MCP Catalog (5)
-
MCP server for using Semgrep to scan code for security vulnerabilities.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
A comprehensive security scanner for MCP servers with YARA rules and static analysis capabilities.
-
Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
Publicado en Official MCP Registry (5)
-
Extract regular expressions from code, each with a ReDoS safety verdict.
-
Explain a regex in plain English and detect catastrophic backtracking risk.
-
Test regular expressions in a timeout-guarded worker, explain them, find catastrophic backtracking.
-
regex-mcp io.github.mrfentmen/regex-mcp
Test, describe, and validate regular expressions locally. No network and no key.
-
Test, validate and explain regular expressions with match highlighting. x402 micropayment.
Encontrados por significado, no por código ni repositorio compartidos: los plugins similares siguen siendo productos distintos, y esto no es una reseña ni una recomendación.
¿Quieres esta marca para tu plugin en nuestro catálogo?
Demuestra que lo mantienes con un archivo en su repositorio, un archivo en tu dominio o un registro DNS, y podrás mostrar esta marca en la ficha, con banners en vivo para tu web y tu README. Cómo funciona la verificación
Además recibirás avisos cuando un marketplace lo publique, lo retire, cambie su marca verificada o lo que pide, y su endpoint remoto quedará monitorizado como un servicio web.
Datos de Official MCP Registry. Las cifras proceden de nuestros propios recorridos periódicos por los marketplaces, leída por última vez el . No publicamos datos de contacto de los editores de plugins.