xbuilder

Static security scanner for Model Context Protocol (MCP) servers. Detects tool-description poisoning, exfiltration cues, hidden-unicode payloads, arbitrary command execution, SSRF surface, hardcoded secrets, and rug-pull risk. Runs locally for Cursor and

Static AEO / GEO (Answer Engine Optimization) readiness scanner. Checks whether AI answer engines (ChatGPT, Perplexity, Google AI Overviews, Gemini) can cite a page: structured data, entity markup, FAQ structure, content depth, E-E-A-T, indexability, AI-c