AddonAudit

Penthera

Listed

io.github.danoszz/penthera

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

Install

npx -y [email protected]

Client fit

Inferred for Cursor, Claude, Codex. Basis: stdio. This is not a certification from those products.

Transports: stdio.

Links

Security

Audit report

Listed Listed on AddonAudit.

initialize did not complete

Automated smoke test, not a security guarantee.

Version
1.9.0
Audited
24 Oct 2026
Package
npm penthera
Advisories
0 critical, 0 high, 0 medium, 0 low
Network
Disabled
  • Pass Version. Pinned npm [email protected]
  • Pass Known vulnerabilities. No critical, high, or medium advisories were returned.
  • Pass License. MIT
  • Pass Install scripts. No preinstall, install, postinstall, or prepare script.
  • Pass Credential patterns. No credential patterns in the published artifact.
  • Pass Package size. 824.0 KB
  • Pass Maintainer activity. Active 0 days ago.
  • Fail Sandbox. initialize did not complete
Sandbox log excerpt 
error No target specified. Provide a URL, --repo, --machine, --readiness, --policy-pack, --sbom, --aibom, --questionnaire, or combine them.

Raw audit JSON

Metadata checks

  • Repository activity: Active in the last 180 days
  • License: Recognized SPDX id
  • Metadata quality: High

Score 100 uses public metadata only. It is separate from the audit tier. Payment never changes a score. How listings are checked.

Listed on AddonAudit

Free to use on this listing. The mark links back to this page and does not change the score or the tier.

Light

Listed on AddonAudit 
[![Listed on AddonAudit](https://addonaudit.com/badges/listed.svg)](https://addonaudit.com/addon/io-github-danoszz-penthera/)
<a href="https://addonaudit.com/addon/io-github-danoszz-penthera/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed.svg" width="135" height="20"></a>
Listed on AddonAudit 
[![Listed on AddonAudit](https://addonaudit.com/badges/listed-dark.svg)](https://addonaudit.com/addon/io-github-danoszz-penthera/)
<a href="https://addonaudit.com/addon/io-github-danoszz-penthera/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-dark.svg" width="135" height="20"></a>
Listed on AddonAudit Listed on AddonAudit 
[![Listed on AddonAudit](https://addonaudit.com/badges/listed-seal.svg)](https://addonaudit.com/addon/io-github-danoszz-penthera/)
<a href="https://addonaudit.com/addon/io-github-danoszz-penthera/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-seal.svg" width="240" height="240"></a>
[![Listed on AddonAudit](https://addonaudit.com/badges/listed-seal-dark.svg)](https://addonaudit.com/addon/io-github-danoszz-penthera/)
<a href="https://addonaudit.com/addon/io-github-danoszz-penthera/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-seal-dark.svg" width="240" height="240"></a>

Get your add-on audited

Request a free audit of a public MCP server or AI coding add-on. A request does not buy a listing, a tier, or a score change.

Request an audit Featured option

Data notes
  • Tool count is not part of this registry record, so it is blank.