Kryptonclaw

What it does

Kryptonclaw is a specialized security scanner for CI/CD pipelines. It analyzes workflow configurations to detect vulnerabilities and attack patterns, specifically those used in high-profile campaigns like HackerBot-Claw. It allows security teams to identify privilege escalation chains, untrusted input injections, and supply chain risks without needing to clone repositories.

Tools

• kryptonclaw_scan_repo: Scan a single repository via GitHub Contents API.
• kryptonclaw_scan_org: Perform batch scanning across an entire GitHub organization.
• kryptonclaw_scan_workflow: Analyze raw workflow YAML content.
• kryptonclaw_findings: Query and filter results from the most recent scan.
• kryptonclaw_rules: List all active detection rules and their metadata.
• kryptonclaw_explain: Get detailed remediation guidance for a specific rule ID.
• kryptonclaw_redteam: Generate potential exploit scenarios for a finding.
• kryptonclaw_sarif: Export findings in SARIF v2.1.0 format for GitHub Code Scanning.
• kryptonclaw_status: Check scan status and cached findings.
• kryptonclaw_config: Retrieve current server configuration.

Installation

{
  "mcpServers": {
    "kryptonclaw": {
      "type": "stdio",
      "command": "kryptonclaw-mcp",
      "args": []
    }
  }
}

Supported hosts

• claude