Secure-Hulk

Security scanner for Model Context Protocol servers and tools.

Overview

Secure-Hulk is a security scanner for Model Context Protocol (MCP) servers and tools. It helps identify potential security vulnerabilities in MCP configurations, such as prompt injection, tool poisoning, cross-origin escalation, data exfiltration, and toxic agent flows.

Features

• Scan MCP configurations for security vulnerabilities
• Detect prompt injection attempts
• Identify tool poisoning vulnerabilities
• Check for cross-origin escalation risks
• Monitor for data exfiltration attempts
• Detect toxic agent flows - Multi-step attacks that manipulate agents into unintended actions
• Privilege escalation detection - Identify attempts to escalate from public to private access
• Cross-resource attack detection - Monitor suspicious access patterns across multiple resources
• Indirect prompt injection detection - Catch attacks through external content processing
• Generate HTML reports of scan results
• Whitelist approved entities

Installation

npm install
npm run build

Usage

Scanning MCP Configurations

# Scan well-known MCP configuration paths
npm i secure-hulk

# Scan specific configuration files
secure-hulk scan /path/to/config.json

# Generate HTML report
secure-hulk scan --html report.html /path/to/config.json

# Enable verbose output
secure-hulk scan -v /path/to/config.json

# Output results in JSON format
secure-hulk scan -j /path/to/config.json

Using OpenAI Moderation API for Harmful Content Detection

Secure-Hulk now supports using OpenAI's Moderation API to detect harmful content in entity descriptions. This provides a more robust detection mechanism for identifying potentially harmful, unsafe, or unethical content.

To use the OpenAI Moderation API:

secure-hulk scan --use-openai-moderation --openai-api-key YOUR_API_KEY /path/to/config.json

Options:

• --use-openai-moderation: Enable OpenAI Moderation API for prompt injection detection
• --openai-api-key <key>: Your OpenAI API key
• --openai-moderation-model <model>: OpenAI Moderation model to use (default: 'omni-moderation-latest')

The OpenAI Moderation API provides several advantages:

1. More accurate detection: The API uses advanced AI models to detect harmful content, which can catch subtle harmful content that pattern matching might miss.
2. Categorized results: The API provides detailed categories for flagged content (hate, harassment, self-harm, sexual content, violence, etc.), helping you understand the specific type of harmful content detected.
3. Confidence scores: Each category includes a confidence score, allowing you to set appropriate thresholds for your use case.
4. Regular updates: The API is regularly updated to detect new types of harmful content as OpenAI's policies evolve.

The API can detect content in these categories:

• Hate speech
• Harassment
• Self-harm
• Sexual content
• Violence
• Illegal activities
• Deception

If the OpenAI Moderation API check fails for any reason, Secure-Hulk will automatically fall back to pattern-based detection for prompt injection vulnerabilities.

Using Hugging Face Safety Models for Content Detection

Secure-Hulk now supports Hugging Face safety models for advanced AI-powered content moderation. This provides additional options beyond OpenAI's Moderation API, including open-source models and specialized toxicity detection.

To use Hugging Face safety models:

secure-hulk scan --use-huggingface-guardrails --huggingface-api-token YOUR_HF_TOKEN /path/to/config.json

Options:

• --use-huggingface-guardrails: Enable Hugging Face safety models for content detection
• --huggingface-api-token <token>: Your Hugging Face API token
• --huggingface-model <model>: Specific model to use (default: 'unit

... View full README on GitHub