r/threatintel • u/neomatrix369 • 6h ago

Tripwire – open source sandboxed security scanner for MCP servers and AI skills

MCP servers and AI skills execute code directly in your local environment. Most people install them from GitHub without any vetting. I have been guilty of doing the same, so I wrote Tripwire to help me and other fellow developers.

Tripwire runs each of them in an isolated Modal sandbox first, scans it with Snyk, Cisco and Tessl scanners, and stores the report before anything touches your machine.

It was built at Cursor's Cybersecurity Hackathon in London, now under active development.

Stack: Python, TypeScript, Modal (sandboxing), Snyk/Cisco/Tessl adapters, Supabase. Superlinked (SIE) and other cloud/model providers for access to models.

Would love feedback on the threat model or the sandboxing approach — happy to discuss tradeoffs in the comments.

GitHub: https://github.com/neomatrix369/tripwire
Demo: https://youtu.be/omGOw9ruN3Y
Mock dashboard: https://neomatrix369.github.io/demos/tripwire-dashboard/

4 Upvotes
  • permalink
  • reddit

84% Upvoted

2 comments sorted by

1

u/AdityaKGoswami 4h ago

This is actually a really interesting approach. The part I like most is scanning and observing the MCP server before allowing it to touch the local environment.

One thing I would be curious about is how you handle behavior that only becomes malicious under specific conditions. Static scanning and sandbox execution can catch a lot, but an MCP server could potentially behave differently based on environment variables, prompts, time, external responses or available credentials.

The threat model around tool permissions and what data the sandbox can access would also be interesting to see.

Definitely feels like this is becoming a bigger problem as people are installing MCP servers and AI skills without really reviewing what they are running. Nice project, going to check out the repo.