Plugin

mcp-yoshi

Real-time security filter for MCP tool communications. Works as a Claude Code hook to inspect all data sent to and received from MCP servers. Detects prompt injection, API key leakage, tool poisoning, ASCII smuggling, SSRF, Base64-encoded payloads, and Rug Pull attacks. Provides PASS/WARN/BLOCK decisions with per-server configuration, allowlisting, and logging. Zero dependencies, ~60ms latency.

• Published source
• Repository

Analysed

12 October 2026

Last observed

12 October 2026

What the code does

• Runs shell commands Code that starts system commands on the machine it runs on.
• Evaluates code at runtime Code that builds and runs code while it executes.
• Runs hooks automatically Hooks that execute without being called explicitly.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.