mcp-audit GitHub

Reference

What's new

What the last three releases added, read from the changelog when this site was built.

mcp-audit 0.26.0 · 2026-10-31

  • REACH-001 now covers Gemini CLI and GitHub Copilot CLI files, and stops trusting a sandbox read-deny when nested user namespaces are on
  • Instruction files that tell the agent to send secrets out (MEM-006; HIGH in a repository's file, MEDIUM in your own)

Plus 3 other changes and fixes.

mcp-audit 0.25.1 · 2026-10-30

Plus 1 other changes and fixes.

mcp-audit 0.25.0 · 2026-10-30

  • affected --transitive and affected --fleet
  • affected reads the installed Claude Code, Codex and Gemini CLI versions, without running them
  • ClawHavoc credited and measured against the skill checks
  • Research record: ContextCrush
  • A tool whose label contradicts its own schema (ANNOT-001, STORY-0136)

Plus 1 other changes and fixes.

Full changelog