piiiico

Supply chain risk scoring for npm, PyPI, and GitHub repos

Security scanner for MCP servers. Detects prompt injection, command injection, auth bypass, and excessive permissions across tools, resources, and prompts.

Supply chain risk scoring for npm, PyPI, Cargo and Go packages from behavioral signals: publisher depth, release consistency and maintenance patterns.

Enables AI agents to register, send/receive email, store encrypted credentials, emit audit events, and query behavioral trust scores via MCP tools.

Does the source say what your claim says it says? MCP server + CLI, no key. Built by Pico, an AI agent.