Agent Security Scanner Mcp

🚀 Major Release: Package Renamed & LLM-Powered Code Review

Package renamed: agent-security-scanner-mcp → prooflayer-agent-security

The old package name continues to work for backwards compatibility.

What's New

🤖 LLM-Powered Code Review Agent

New code-review-agent/ module for semantic security analysis using intent profiling to distinguish safe patterns from dangerous ones based on project context.

The key differentiator: Same code, different verdicts:

| Pattern | Build Tool | E-Commerce App |
|---------|------------|----------------|
| subprocess.run() with hardcoded commands | ✅ Expected | ⚠️ Suspicious |
| eval(req.query.filter) | ⚠️ Suspicious | ❌ Dangerous |
| os.remove() | ✅ Expected for file organizer | ❌ Dangerous for auth service |

Features

• Intent Profiling — Reads README, dependencies, and structure to understand project purpose
• 3 LLM Providers — Anthropic API, OpenAI API, Claude CLI (no API key needed!)
• 3 Output Formats — Colored terminal text, JSON, SARIF 2.1.0
• Dynamic Chunking — Large files split based on token budget, not hardcoded line limits
• Prompt Injection Defense — System prompts mark repo content as untrusted
• 58 tests, 17 source files, 4 test fixture projects

Quick Start

# Install
npm install -g prooflayer-agent-security

# Initialize for Claude Code
npx prooflayer-agent-security init claude-code

# Use LLM-powered code review (no API key needed!)
cd code-review-agent
npm install && npm run build
npx tsx bin/cr-agent.ts analyze ../path/to/project -p claude-cli -v

Migration Guide

No action required — the old package name agent-security-scanner-mcp continues to work:

# Both work:
npx prooflayer-agent-security init claude-code
npx agent-security-scanner-mcp init claude-code

Full Changelog

• BREAKING: Package renamed from agent-security-scanner-mcp to prooflayer-agent-security
• feat: Add LLM-powered semantic code review agent with intent profiling
• feat: Include code-review-agent in npm package
• docs: Add comprehensive code-review-agent documentation to README
• chore: Update all CLI commands, hooks, and internal references