neuron-one Ship Safe - Full Security Scan
Run comprehensive security scan:
Attack Classes Covered:
- Prompt injection vectors
- RAG data poisoning
- Active API key/secret leaks
- Supply chain risks (dependencies)
- MCP misconfiguration
- Authentication bypasses
- Authorization flaws
- Data exposure
- Injection attacks (SQL, NoSQL, Command)
- Cross-site attacks (XSS, CSRF)
Process:
- Scan all source code files
- Check all configuration files
- Audit dependencies (npm audit / pip audit)
- Check .env and secrets handling
- Verify MCP configurations
- Check authentication flows
- Report with severity levels
Output:
SCAN COMPLETE
CRITICAL: N issues
HIGH: N issues
MEDIUM: N issues
LOW: N issues
[Detailed report per issue with fix suggestions]