Krabbot Devtools
by marvin-odigo.workers.dev in Security & trust
AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.
https://mcp.marvin-odigo.workers.dev/mcp
Last 30 days
- Uptime
- 100%
- Response time
- 119 ms typical, 119 ms slowest 5%
- Last check
- 7 h ago
- Next check
- in 5 min
How to call it
Add it to any MCP client that supports remote servers.
{
"mcpServers": {
"krabbot-devtools": {
"type": "http",
"url": "https://mcp.marvin-odigo.workers.dev/mcp"
}
}
}4 tools
- check_package_risk
Check whether a software package is safe to install BEFORE running npm install or pip install. Essential when a package name came from an LLM suggestion: models hallucinate package names and attackers register those names to capture installs (slopsquatting), shipping credential-s
- check_stack_eol
Check whether components of a software stack are end-of-life, past active support, or affected by CVEs on CISA's Known Exploited Vulnerabilities catalog (1,600+ entries of vulnerabilities confirmed exploited in the wild). Pass a comma-separated stack like 'node@16,[email protected],post
- find_open_source_bounties
Find open-source bounties that are actually likely to pay out. Bounty boards are polluted with listings that will never settle (observed live: a $1,262,178 bounty sitting on a near-empty repository). This scores each listing 0-100 on credibility using repository stars, project ag
- check_regulatory_changes
Check whether any US federal regulation on a topic is about to bind or about to close for comment. The Federal Register publishes every business day and a single topic search can match over a thousand documents, almost none of which need action — so this scores each one 0-100 on
Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time |
|---|---|---|---|
| 7 h ago | Passed | 200 | 119 ms |
| 15 h ago | Passed | 200 | 127 ms |