io.github.CSOAI-ORG/meok-mcp-injection-scan-mcpai

meok-mcp-injection-scan-mcp

Flagged

MCP injection / prompt-poisoning / SSRF scanner. 30+ canonical rules covering the April 2026

Our take

Part of a 300+ listing flood from a single operator (MEOK AI Labs / CSOAI): templated repos mass-published across every category, most decorated with an "MCP Scorecard 86/100" badge from proofof.ai — a domain the same operator owns, a self-issued trust signal dressed up as independent review. It presents as an MCP injection scanner. The README is the operator's full boilerplate — "production-ready" feature list, EU AI Act compliance checkmarks, $99/$499 pricing, sales booking link — and its auth middleware meters usage (5 free scans/day as a lead magnet) with API-key tiers at $29/$79 via Stripe and phones home to the operator's attestation endpoint. A security scanner whose own trust signals are self-issued is not a security scanner. Working code doesn't offset manufactured trust signals at this scale.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified
22 days ago
in registry since
2026-06-10

github.com/CSOAI-ORG/meok-mcp-injection-scan-mcp

reaai

REA

Verified · 2 days ago

Reverse engineer anything from your terminal or agent with one CLI and MCP server.

hand-reviewed291k stars232k dl/wkchecked 2 days ago

claude-flowai

claude-flow

Verified · 31 days ago

AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.

hand-reviewed73k stars19k dl/wkchecked 31 days ago

tldrawai

tldraw

Verified · 32 days ago

Draw and visually collaborate with your agents on tldraw's canvas.

hand-reviewed50k starschecked 32 days ago

codebase-memory-mcpai

Codebase Memory

Verified · 22 days ago

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

hand-reviewed45k stars12k dl/wkchecked 22 days ago

openmetadata-mcpai

OpenMetadata

Verified · 14 days ago

Official OpenMetadata MCP: 21 read and write tools for search, lineage, data quality, governance.

hand-reviewed15k starschecked 14 days ago

mobilerunai

mobilerun

Verified · 34 days ago

Control real Android and iOS devices with LLM agents — tap, swipe, type, automate flows.

hand-reviewed9.4k starschecked 34 days ago