goklab/guardvibe

What's New

Cross-file taint analysis — new analyze_cross_file_dataflow MCP tool that tracks tainted data flowing across module boundaries.

How it works

1. Resolves imports/exports between files
2. Builds a module graph
3. Identifies exported functions whose parameters flow to dangerous sinks
4. Finds call sites that pass tainted user input to those functions
5. Reports the full cross-file flow chain: source → call → sink

Detects across files

• SQL injection (req.body → helper → db.query)
• XSS (user input → renderer → innerHTML)
• Open redirect (searchParams → nav helper → redirect)
• Code injection (input → processor → eval)
• Path traversal (user path → file util → readFileSync)

Example

[SOURCE] http-input -> userId in src/routes/users.ts:3
[CALL] runQuery(userId) in src/routes/users.ts:4
[SINK] sql-injection in src/lib/db.ts:4

26 tools, 313 rules.