Testdelta MCP
Base-vs-head test result differ: named tests added, removed, and changed, never raw counts.
github.com/CloudCorpRecords · 24 listed services · provider site
Base-vs-head test result differ: named tests added, removed, and changed, never raw counts.
GitHub Actions supply-chain hardener: audit workflows for unpinned actions and build a SHA pin plan.
Base-vs-head CI differ: which PR failures are introduced, pre-existing, external, or fixed.
Track stale claims and parked fixes so open-source work does not silently die.
PR dependency early warning: install scripts, typosquats, downgrades, and lockfile drift.
Least-privilege auditor for GitHub Actions workflows: permissions, triggers, secrets.
Extract a repo's contribution gates into machine-readable contribution-gates.json.
Pre-flight checks for open-source contributions: is this GitHub issue actually landable?
Persistence hook auditor: scan repos for auto-exec hooks, flag Shai-Hulud patterns.
An E2E encrypted mailbox for AI agents: claim an address, send and receive sealed messages.
Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.
Audit any MCP server: handshake, schemas, descriptions, error handling, scored.
Vetting for MCP servers and skills: capabilities, configs, mismatches, typosquats, probe parity.
Pre-install verdicts for npm packages: GO, RISKY, FAKE, or MISSING. Built for humans and AI agents.
Attention report for your open GitHub PRs: what needs you right now.
Red-first repro verifier: a fix counts only when the repro fails on the base and passes on the fix.
Release verification: git tag, release, npm, MCP Registry, and GHCR must agree, or NO-GO.
Observability, tracking, and root-cause for Security Wave scans and findings.
Probe a URL and name the bot wall: vendor, verdict, and evidence. CLI plus stdio MCP server.
Token budget auditor for agent context: per-file estimates, top offenders, exclusion advice.
Condense a CI log to its failure sections and root-cause lines, with original line anchors.
Validate AGENTS.md and CLAUDE.md against repo reality: paths, scripts, and commands checked.
Check .env.example against actual env usage in code: missing, stale, and undocumented vars.
Pre-publish npm pack auditor: shipped files, size, secret-pattern leaks, missing fields.
Provider identity is derived from the domain or repository in the source record. If two vendors share a host, they appear together here — that is a limitation of the data, not a statement about ownership.