io.github.jmshinhwa/container-hardening-800-190
Reads a Dockerfile or compose file and names the hardening controls it fails, with the NIST SP 800-1
Servidor MCP · de jmshinhwa
Resumo
io.github.jmshinhwa/container-hardening-800-190 é um servidor MCP publicado por jmshinhwa. Marketplaces que lemos e que o listam: 1 (Official MCP Registry). A última mudança que registramos foi em 2026-10-17. Conforme nossa passagem pelos marketplaces em 2026-10-26.
O que pede
- Roda na sua máquina
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Pacote
npm @readystack/container-hardening-800-190 (@readystack/container-hardening-800-190 no npm)
- Downloads do npm por semana: 35 (2026-10-17)
- Downloads do npm por mês: 648 (2026-10-17)
- Última versão no npm: 1.0.3, publicada em 2026-09-29
- A última versão está marcada como obsoleta no npm
- A versão declarada 1.0.1 está marcada como obsoleta no npm
Nenhuma vulnerabilidade conhecida no OSV para 1.0.1 (verificado em 2026-10-23)
Os dados do npm vêm do registro público do npm (registry.npmjs.org, api.npmjs.org). Cada número é do próprio registro e nunca é somado a outro. Um registro que não publica um número não mostra nenhum: sem número não é zero. Os registros de vulnerabilidades vêm do OSV.dev (CC BY 4.0) e dizem respeito apenas à versão declarada; uma listagem sem versão declarada não recebe resposta. Não analisamos código.
Funciona com
- Claude Code
- Codex
- Cursor
- VS Code
- Copilot CLI
Um link de um clique abre o cliente, que pede confirmação antes de adicionar o servidor.
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como servidor MCP local: pacote npm
Gerado a partir do que Official MCP Registry declara.
claude mcp add --transport stdio container-hardening-800-190 -- npx -y @readystack/container-hardening-800-190 --mcp[mcp_servers.container-hardening-800-190]
command = "npx"
args = ["-y", "@readystack/container-hardening-800-190", "--mcp"]{
"mcpServers": {
"container-hardening-800-190": {
"command": "npx",
"args": [
"-y",
"@readystack/container-hardening-800-190",
"--mcp"
]
}
}
}Onde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Official MCP Registry (Abrir o registro) | Listado | 1.0.1 | Downloads por mês (npm): 648 Downloads por semana (npm): 35 Forks (GitHub): 1 Estrelas (GitHub): 1 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
O que mudou
Nada mudou neste plugin desde que começamos a acompanhá-lo.
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
-
Lint Dockerfiles for root users, latest tags, secrets in ENV or ARG, missing HEALTHCHECK and more.
-
base-image-eol-lint io.github.jmshinhwa/base-image-eol-lint
Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha
-
Audit a Linux host's security hardening posture and produce a risk-ranked report. 461 checks across 33 areas: kernel sysctls and boot parameters, mount options, SUID/SGID…
-
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
-
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
-
Docker containerization toolkit for image optimization, security scanning, and container best practices. Includes container architect agent for strategic container decisions.
-
heimdall io.github.caglarbozkurt/heimdall
Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.
-
Security companion, full-project audit, and context-aware triage. Finds the smallest diff that breaks the attack chain; applies nothing.
-
security-suite io.github.4hmetuyar/security-suite
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
Drive the ARMO Cloud and Kubernetes security platform from natural language: incidents, CVEs, posture, runtime, and policies, with dry-run safety on every mutation.
-
Build a container image from a Dockerfile, scan it for security vulnerabilities with Trivy, and auto-clean up. Uses Docker or Podman. No local Trivy install needed - runs Trivy as…
-
Security audit skill collection — SAST, DAST, external software analysis, architecture review, dataflow clustering, assessment-as-code methodology
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Opsera DevSecOps Agent — AI-powered architecture analysis, security scanning, compliance auditing, and SQL security for your codebase. Free trial included.
Listado em Claude Code: claude-plugins-official (5)
-
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
Listado em Claude: knowledge-work-plugins (5)
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
Hosted MCP server for AI-assisted Grafana Cloud observability — no local installation required.
Listado em Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Available for US1 customers only. Analyze, investigate, and act on your Datadog telemetry directly from ChatGPT using natural language. Ask questions about your production…
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
Listado em Community GitHub marketplaces (4)
-
Audit a Linux host's security hardening posture and produce a risk-ranked report. 461 checks across 33 areas: kernel sysctls and boot parameters, mount options, SUID/SGID…
-
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
-
Docker containerization toolkit for image optimization, security scanning, and container best practices. Includes container architect agent for strategic container decisions.
-
Security companion, full-project audit, and context-aware triage. Finds the smallest diff that breaks the attack chain; applies nothing.
Listado em Copilot CLI: github/awesome-copilot (5)
-
containers
Browse and operate local Docker containers and images in a Copilot canvas. Follow logs, watch resource usage, browse files, inspect image layers, and recover Dockerfile provenance.
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
A comprehensive collection of specialized agents for software analysis, impact assessment, structural quality advisories, and architectural review using CAST Imaging.
-
Security extension for GitHub Copilot App with a canvas to work on GHAS findings.
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
mcp-apps
Generate MCP App widgets for MCP tools. Produces self-contained HTML widgets using the MCP Apps protocol.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Analyze MSVC build performance using vcperf.exe and ETL traces.
Listado em Cursor: cursor/plugins (5)
-
Query and remediate compliance tests, controls, frameworks, risks, and vulnerabilities in Vanta.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Thermo-nuclear branch review: deep security/correctness audits, harsh code-quality rubrics, parallel subagents, thermos orchestration, and optional merge-ready PR flows.
-
Let Grok Bot reach MCP servers on your private Tailscale network: connect your own tailnet, or your team's company tailnets turned on by a team admin, with each member using their…
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Listado em Docker MCP Catalog (5)
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
AI interface to troubleshoot and observe Kubernetes/Container workloads.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
A comprehensive security scanner for MCP servers with YARA rules and static analysis capabilities.
-
Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
Listado em Official MCP Registry (5)
-
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
-
Lint Dockerfiles for root users, latest tags, secrets in ENV or ARG, missing HEALTHCHECK and more.
-
base-image-eol-lint io.github.jmshinhwa/base-image-eol-lint
Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha
-
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
-
heimdall io.github.caglarbozkurt/heimdall
Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.
Listado em PyPI (MCP servers) (5)
-
Scan, enumerate, and risk-score every MCP server configured on your machine.
-
mcp-safeguard com.cognivators/mcp-safeguard
MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
-
AI agent tools for Open Security Controls Assessment Language (OSCAL)
-
Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.
-
Manage Docker (containers, images, Compose, Swarm, registries) via the Docker SDK and CLI.
Listado em npm registry (MCP servers) (5)
-
Detect hardcoded secrets in source and config. Reports masked previews, never the values.
-
Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).
-
mcp com.dechonet/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
-
guardvibe io.github.goklab/guardvibe
Deterministic security layer your AI can't be. 618 rules, 39 tools, CLI + doctor + host audit.
-
Read-only MCP server exposing the dsh-plugin-certification registry for DeepSeek Harness plugins.
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Official MCP Registry. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.