Skip to content
View GaboITB's full-sized avatar
🏠
Working from home
🏠
Working from home

Block or report GaboITB

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
GaboITB/README.md

Hi, I'm Gaëtan 👋

Systems & network administration student in Belgium, focused on defensive security, homelab infrastructure, and AI tooling.

🛡️ MCP Shield

MCP Shield — a security audit framework for Model Context Protocol (MCP) servers, scanning them before installation for supply-chain attacks, prompt injection, tool poisoning, and rug pulls.

  • 17 detectors across 3 surfaces (source code, MCP metadata, runtime delta)
  • 359 tests, zero dependencies (Python stdlib only)
  • Battle-tested on 31+ real-world MCP servers
  • pip install mcp-shield-audit · PyPI

🔎 Responsible disclosures

Vulnerabilities I found with MCP Shield and reported to real-world MCP projects:

Project Finding
QuantGeekDev/docker-mcp Command injection via shell=True on unsanitized input
0xKoda/WireMCP Command injection via unsanitized exec() parameters
gilby125/mcp-proxmox TLS certificate verification disabled by default

🧰 Focus

Defensive security · MCP / LLM security · Homelab (Proxmox, WireGuard) · Python · Automation

Popular repositories Loading

  1. mcp-shield mcp-shield Public

    Security audit framework for MCP servers. 17 detectors, confidence scoring, 3 scan modes, zero dependencies. pip install mcp-shield-audit

    Python 2

  2. PocketUFDS PocketUFDS Public

    Free ready-to-play pack: RadioMaster Pocket for Ukrainian Fight Drone Simulator (EdgeTX model, UA/EN/FR voices, installer, animated boot firmware)

    Python 1

  3. GaboITB GaboITB Public

    Profile

  4. HomicideDeskFR HomicideDeskFR Public

    Patch français de Homicide Desk : les 7 affaires en français naturel, interface complète, suspects qui répondent en vrai français, réponses deux fois plus rapides. Projet de fan, sans lien avec Shu…

    JavaScript

  5. edgetx edgetx Public

    Forked from EdgeTX/edgetx

    EdgeTX is the cutting edge open source firmware for your R/C radio

    C