codeguard-mcp-server

The server uses the Model Context Protocol (MCP) over stdio by default, minimizing network exposure. It loads security instruction markdown files from a local 'rules/' directory and serves their content based on matching logic (file paths, languages, context keywords). The code does not use 'eval' or dynamic code execution on untrusted input. There are no hardcoded secrets identified within the server's own source code. The 'validate_code_security' tool processes code snippets for rule matching but does not execute them. The overall design is security-conscious, focused on providing security guidance rather than executing arbitrary code or handling sensitive user data directly. The security of the instruction content itself is external to the server's code.