io.github.cyanheads/cisa-cybersecurity-mcp-server
io.github.cyanheads/cisa-cybersecurity-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/39cf21ab-ffa8-41d2-b4f5-46f29fbe7791/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/cisa-cybersecurity-mcp-server"
title: null
description: "CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless."
version: "0.5.0"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/cisa-cybersecurity-mcp-server"
provider: "github"
owner: "cyanheads"
name: "cisa-cybersecurity-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/cisa-cybersecurity-mcp-server"
version: "0.5.0"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/cisa-cybersecurity-mcp-server"
version: "0.5.0"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://cisa-cybersecurity.caseyjhand.com/mcp"
endpoint_host: "cisa-cybersecurity.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[7]
0{9}
name: "cisa_check_cve_status"
title: "cisa_check_cve_status"
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.928
risk_severity: "INFO"
fingerprint: "3346581086690c923ac17e582d30bc006e2e9395fef7b550e88057025894869f"
input_schema_fingerprint: "463508e93e3665516a14160487c69e2607f9d798eb64c35f2f0d99e72a694c3b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
1{9}
name: "cisa_get_advisory"
title: "cisa_get_advisory"
effect: "READ"
effect_confidence: 0.813
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.59
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.687
risk_severity: "INFO"
fingerprint: "0c9e3e0e7baafc2b98bff3d8eb2dcc097645c9ce56f920939ac8acb27932dd1c"
input_schema_fingerprint: "19c250b16962f83bfd8dd5e81d77f8971d4834d9ac215a55799f299d08a67225"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
2{9}
name: "cisa_get_alerts"
title: "cisa_get_alerts"
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "a82d50eeecbc4c9fd6167f87393614d6e8f6434b5199820a892d8b6a2b053fb2"
input_schema_fingerprint: "9f63f8dc754470db553f18d8f0c43def5e79bd11596f694dc8ba0f8260e05bb3"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
3{9}
name: "cisa_get_ssvc"
title: "cisa_get_ssvc"
effect: "READ"
effect_confidence: 0.841
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "03510dac456d2c8df437d710f386b2ade7aad6a331c0592a798c863f2bfdaa61"
input_schema_fingerprint: "355bc10febfd2a5c039b2456648a41a0f0e511a0c225f792e5d37a70dab2eb15"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
4{9}
name: "cisa_list_reference"
title: "cisa_list_reference"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "4fe7ee439e9bf3ba918e1689847d0c76e6c39b943e5318edbc54ac6feb4f42d6"
input_schema_fingerprint: "36acd2257c81abd7be59231278c470a7e0bcbe8cc3797dc8c1a144c2524d16bc"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
5{9}
name: "cisa_search_ics_advisories"
title: "cisa_search_ics_advisories"
effect: "READ"
effect_confidence: 0.813
capabilities[4]
0{2}
capability: "CALENDAR"
confidence: 0.675
1{2}
capability: "EMAIL"
confidence: 0.59
2{2}
capability: "PERSONAL_DATA"
confidence: 0.59
3{2}
capability: "SECURITY_CONTROL"
confidence: 0.729
risk_severity: "MEDIUM"
fingerprint: "be559ab24b85a8b1314569dc0c6bea022b8460be152c2185184ceac1c163ee4a"
input_schema_fingerprint: "0539f45d287b4eac7a41892e34ec4f2e0b217a0bee18126311bf73db621e0c02"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
6{9}
name: "cisa_search_kev"
title: "cisa_search_kev"
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.632
risk_severity: "INFO"
fingerprint: "9d37b37553437a8c5bd3b402d02a1fbed2abd13d273fc3676d32186bda9d208e"
input_schema_fingerprint: "d4b98c7e11baecb6e7a3e853e157fc545d63e07d5acf0a1068fe43baf5569cc2"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: null
resources[64]
0{4}
key: "cisa://advisory/ICSA-25-275-02"
kind: "resource"
mime_type: "application/json"
fingerprint: "7b7a614162306844f2d849f45741c6e450b950d9dd8bd05f8a21a0e707eb4a1c"
1{4}
key: "cisa://advisory/ICSA-26-125-01"
kind: "resource"
mime_type: "application/json"
fingerprint: "5f2ceae97530b5962246befbc5940acffecc0ee1435090ca4ef318951ff19eb7"
2{4}
key: "cisa://advisory/ICSA-26-155-04"
kind: "resource"
mime_type: "application/json"
fingerprint: "bb85679d92ec1d2697b5c1323a5cc1163237c39b9fd78f0fd1954322654ab735"
3{4}
key: "cisa://advisory/ICSA-26-211-07"
kind: "resource"
mime_type: "application/json"
fingerprint: "f841675aee0bcd8ed755d272a297018522536bfd7a7e24c76a13f6f3bd315de7"
4{4}
key: "cisa://advisory/ICSA-26-237-03"
kind: "resource"
mime_type: "application/json"
fingerprint: "468586fb6ace51fc21a52a8cfc67b6be4ddcb0ac60376ba626821362310e5189"
5{4}
key: "cisa://advisory/ICSA-26-258-06"
kind: "resource"
mime_type: "application/json"
fingerprint: "a0f0ef0cc985e024737aa66cf87422e36fe28c6515ca88b18be4582bf962a04d"
6{4}
key: "cisa://advisory/ICSA-26-267-02"
kind: "resource"
mime_type: "application/json"
fingerprint: "0b7cc87849199aa7637b0602b50dedad06975d93f089eaa5cb623059d9940b1b"
7{4}
key: "cisa://advisory/ICSA-26-295-01"
kind: "resource"
mime_type: "application/json"
fingerprint: "0da522ad5c935658b3c0e1d943fa6e835a1b191337a07ffa69bbd770a1af0bf9"
8{4}
key: "cisa://advisory/ICSA-26-295-02"
kind: "resource"
mime_type: "application/json"
fingerprint: "1f0753ee273b6137120d3775ddd58951782f8ed29a43e2ca0b1bc2a052b55329"
9{4}
key: "cisa://advisory/ICSA-26-295-03"
kind: "resource"
mime_type: "application/json"
fingerprint: "273ec3f78737c01a5ee82c040fb17f26b114db5228063d718383ea7c15667f9f"
10{4}
key: "cisa://advisory/ICSA-26-295-04"
kind: "resource"
mime_type: "application/json"
fingerprint: "a9d2af27e56dfe8265ceb996508ee20a9b0a085a9a9b5c84ad109e3a6e169b5c"
11{4}
key: "cisa://advisory/ICSA-26-295-05"
kind: "resource"
mime_type: "application/json"
fingerprint: "fd7e6ba7c23e4786278528c369ef4870ccbef7a54491fa4ebefb578fb8bf471b"
12{4}
key: "cisa://advisory/ICSA-26-295-06"
kind: "resource"
mime_type: "application/json"
fingerprint: "814b008bd0bc6945bcc0404d93713fa099dc51841c189a6ded72b95068efe208"
13{4}
key: "cisa://advisory/ICSA-26-295-07"
kind: "resource"
mime_type: "application/json"
fingerprint: "f135e626d293bc3e80e7259752856f8c41744c8d6105945690786b8a6dfde53a"
14{4}
key: "cisa://advisory/ICSA-26-295-08"
kind: "resource"
mime_type: "application/json"
fingerprint: "cc54d9865e31a146a654f5c7f4b1d6a197cfc4a74a35215ede6444f18f123616"
15{4}
key: "cisa://advisory/ICSA-26-295-09"
kind: "resource"
mime_type: "application/json"
fingerprint: "dda9ca3ebf3e548b1126c8b40c1c230b6cfc4eb7bfc549d63c0af6f0c7760798"
16{4}
key: "cisa://advisory/ICSA-26-295-10"
kind: "resource"
mime_type: "application/json"
fingerprint: "c8cce397b5c5bdd437272a83d58abf461a572e0c5183e5fb94bf92d3107a72b1"
17{4}
key: "cisa://advisory/ICSA-26-295-11"
kind: "resource"
mime_type: "application/json"
fingerprint: "fcc177d494578b5e04119c0c02d7f6406e2c4e7ed643c111c04ebe8337b04100"
18{4}
key: "cisa://advisory/ICSA-26-295-12"
kind: "resource"
mime_type: "application/json"
fingerprint: "b760828dabb1102301cd6f78be2981538229d7dfb18dd8fd18415bf6f5a935ba"
19{4}
key: "cisa://advisory/ICSA-26-300-01"
kind: "resource"
mime_type: "application/json"
fingerprint: "fe71818eeb63cf51109b7e79214f66069678a131ace1f7d2bd2bbc7ed4e0789a"
20{4}
key: "cisa://advisory/ICSA-26-300-02"
kind: "resource"
mime_type: "application/json"
fingerprint: "96273839981393124544199d35088de9c4d22c894bc25465c00c0550e8ee1253"
21{4}
key: "cisa://advisory/ICSA-26-302-01"
kind: "resource"
mime_type: "application/json"
fingerprint: "6db1b0675835b5fa47ef9665cdf731523ba4c399b156c94ed0e650923f3f8fc9"
22{4}
key: "cisa://advisory/ICSA-26-302-02"
kind: "resource"
mime_type: "application/json"
fingerprint: "da465e12c07ee169e272ba8bc6086fddab31fa301255b75095e1f06617eb1ac1"
23{4}
key: "cisa://advisory/ICSA-26-302-03"
kind: "resource"
mime_type: "application/json"
fingerprint: "ba0e711f1e752bdbea4ddbfcf93749bf5d51790834bac93cd8f9ea90782c044b"
24{4}
key: "cisa://advisory/ICSA-26-307-01"
kind: "resource"
mime_type: "application/json"
fingerprint: "e78e620d505d24d4c4706f5f9790a3b15a05cebc0459f19c09411218ac22e008"
25{4}
key: "cisa://advisory/ICSA-26-316-01"
kind: "resource"
mime_type: "application/json"
fingerprint: "2dceb6a5b4267f7233dd23d2da9492bf4d9dca1dc4957edb49b2a39e9e3f6c7d"
26{4}
key: "cisa://advisory/ICSA-26-316-02"
kind: "resource"
mime_type: "application/json"
fingerprint: "e6785e7a842b32fdb09a04eb3b1a6af2533a1d50ae03df757fe6b463cc2df882"
27{4}
key: "cisa://advisory/ICSA-26-316-03"
kind: "resource"
mime_type: "application/json"
fingerprint: "d55eae6dad2f5e9ff1521ca4f1e54350b7e48e541674012861021518775f53d3"
28{4}
key: "cisa://advisory/ICSA-26-316-04"
kind: "resource"
mime_type: "application/json"
fingerprint: "631f68a9af66c9d3e3733dcb50c922ec22bdf175477278bfd5076c4f7c87899d"
29{4}
key: "cisa://advisory/ICSA-26-316-05"
kind: "resource"
mime_type: "application/json"
fingerprint: "384781090e96cebeaa5c070bff68a31a3bb4248848d3c843a917dafbbac7d638"
30{4}
key: "cisa://kev/CVE-2024-27834"
kind: "resource"
mime_type: "application/json"
fingerprint: "0a5ef5b4876de0f17e8fb87ae9463b90b479a523aee51f289a4b484b407f6d7e"
31{4}
key: "cisa://kev/CVE-2026-102895"
kind: "resource"
mime_type: "application/json"
fingerprint: "689f8c3dea5091d84deeb0ef7de78403e754ad7a0aa33bbfc7381506ffecdf93"
32{4}
key: "cisa://kev/CVE-2026-109618"
kind: "resource"
mime_type: "application/json"
fingerprint: "82a270be7849875512b0ad8c7844f0a5d4cd2e806dc89b0ef5777247c2046ebb"
33{4}
key: "cisa://kev/CVE-2026-109619"
kind: "resource"
mime_type: "application/json"
fingerprint: "3fd994b674e61bd6b253d4ff6dabad345f0193c529024d93b6ec3b8a315af8a1"
34{4}
key: "cisa://kev/CVE-2026-110447"
kind: "resource"
mime_type: "application/json"
fingerprint: "b4a61cb12b43996c27e6c5dd100acf221fe43913b562b041e103f03e852df4c5"
35{4}
key: "cisa://kev/CVE-2026-111357"
kind: "resource"
mime_type: "application/json"
fingerprint: "ee2ed787dac5ddd802e1ba409c0097d118159018971f7098a5977e107c82fcec"
36{4}
key: "cisa://kev/CVE-2026-111497"
kind: "resource"
mime_type: "application/json"
fingerprint: "08b4c2c2964dd4781a3ccee4d4c6151266696fbb2a48ce8b7d9f59ba4805641d"
37{4}
key: "cisa://kev/CVE-2026-111560"
kind: "resource"
mime_type: "application/json"
fingerprint: "6106f8a5a00b92929b475088c9dc98c3e96c69bf9b3eaea8584e5d20496a4c85"
38{4}
key: "cisa://kev/CVE-2026-111793"
kind: "resource"
mime_type: "application/json"
fingerprint: "447bae24a5d71fac9a9ef6bb3fea0f352cb1564e5e0ab496fcc9985ccf06ad46"
39{4}
key: "cisa://kev/CVE-2026-114625"
kind: "resource"
mime_type: "application/json"
fingerprint: "93f0b37ef165e90949ad53d2d9387710be12897c5c0ad42257914f887d6aea6f"
40{4}
key: "cisa://kev/CVE-2026-114713"
kind: "resource"
mime_type: "application/json"
fingerprint: "d103bbe65543454f3515499ad153fb8b444217219d9eb484daa427a4303012e6"
41{4}
key: "cisa://kev/CVE-2026-116606"
kind: "resource"
mime_type: "application/json"
fingerprint: "bca76b932bb264796f2982c9d28b66c8b62984ef25d6466e7d6f65265e515c18"
42{4}
key: "cisa://kev/CVE-2026-116779"
kind: "resource"
mime_type: "application/json"
fingerprint: "5c5488052ab303b6323d8d4c9b3be3d9496ddcd22625f14abf05bd7c5ed478cd"
43{4}
key: "cisa://kev/CVE-2026-118527"
kind: "resource"
mime_type: "application/json"
fingerprint: "9436d06302e8405a4318f8b3c3a4a77cb3f29b4188899bc7ec703e72bc148c6e"
44{4}
key: "cisa://kev/CVE-2026-119977"
kind: "resource"
mime_type: "application/json"
fingerprint: "5c233e5bfdd5a3a7ad34b93d46e5a4c79dc9dbe01b5dc0d7c1a4cb454053c953"
45{4}
key: "cisa://kev/CVE-2026-123039"
kind: "resource"
mime_type: "application/json"
fingerprint: "7c64c6620210e84088ceedfeee80a55d777bd350fe573d86c7934a4fd12b04c7"
46{4}
key: "cisa://kev/CVE-2026-123158"
kind: "resource"
mime_type: "application/json"
fingerprint: "5637fd4fbaec039b59c45dc93d78d45c255eb3c4abec7e327941ab8303e1e99e"
47{4}
key: "cisa://kev/CVE-2026-123218"
kind: "resource"
mime_type: "application/json"
fingerprint: "dc1bfdccb48bbcb22a42f612dce8d3de5b33cc374410e2086944ad50d1077ab6"
48{4}
key: "cisa://kev/CVE-2026-124194"
kind: "resource"
mime_type: "application/json"
fingerprint: "93cd7586db761589c3c2e8406a99b88a78f8669967bfaa7a85313b43fac26a8d"
49{4}
key: "cisa://kev/CVE-2026-125350"
kind: "resource"
mime_type: "application/json"
fingerprint: "d953c109412e437d2f67f779c59c3815bf4507523dedbda45fcf48848f2a2512"
50{4}
key: "cisa://kev/CVE-2026-19868"
kind: "resource"
mime_type: "application/json"
fingerprint: "4420111e50cd6feca5e2c51a96f7c26ec06da0861a001a60a0dddac597577db7"
51{4}
key: "cisa://kev/CVE-2026-20320"
kind: "resource"
mime_type: "application/json"
fingerprint: "1abaaa335a668c8422c57164ba41427f52a6b8bf3137ccabc4afae4fc0442b07"
52{4}
key: "cisa://kev/CVE-2026-41709"
kind: "resource"
mime_type: "application/json"
fingerprint: "c71241d9454eb4271ac9be8f24bcbb30babd5aedf0b04e88f32b89eee6d20638"
53{4}
key: "cisa://kev/CVE-2026-46300"
kind: "resource"
mime_type: "application/json"
fingerprint: "9ba1b2963f896de2507f84c7a368ebcc86ae2c0f8d95bdbf23012a659eee8bd3"
54{4}
key: "cisa://kev/CVE-2026-48356"
kind: "resource"
mime_type: "application/json"
fingerprint: "d7e94cb690d74a7d47e860ec5b6e75f84b9e05b3d55d5e2d8e7b91fe87823d7e"
55{4}
key: "cisa://kev/CVE-2026-76418"
kind: "resource"
mime_type: "application/json"
fingerprint: "ebadac9ca8e2f8fa97e009c8a33c3d25547d6cc0bb3ef021044c8361189db701"
56{4}
key: "cisa://kev/CVE-2026-96654"
kind: "resource"
mime_type: "application/json"
fingerprint: "d962081391a815cbadd4eb5dedf83f8996f68b4b7ad117b166e67f4dfe124a3b"
57{4}
key: "cisa://kev/CVE-2026-96655"
kind: "resource"
mime_type: "application/json"
fingerprint: "7d7d61e00c5e4396cac3e2c26a59b1d0c30ba40d6a7a271758c6d16c3abac9f9"
58{4}
key: "cisa://kev/CVE-2026-96656"
kind: "resource"
mime_type: "application/json"
fingerprint: "8f81505ecff466070281704d7d56ed2f21269123fd9e638f5cd16058eae16110"
59{4}
key: "cisa://kev/CVE-2026-97229"
kind: "resource"
mime_type: "application/json"
fingerprint: "4ad89a3a82cd7a012675c144d43c9d2cca8d9e7b2cad97f060cff46fedd49080"
60{4}
key: "skill://cisa-cybersecurity-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "470cc175cfa313cc4277357ca051d1a6240e50f7ff32185afe21115ba214299a"
61{4}
key: "cisa://advisory/{advisoryId}"
kind: "template"
mime_type: "application/json"
fingerprint: "2a16cdf07ab9bf1652109dea18a8cf27adec1fecfc3b16c2619476f3d5c7216c"
62{4}
key: "cisa://kev/{cveId}"
kind: "template"
mime_type: "application/json"
fingerprint: "96361e5c3a42b2524887263760d9549983fda5de09669b389559943f3d7182ea"
63{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "cisa-cybersecurity.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[35]
0{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
4{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
5{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
6{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
7{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
8{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
9{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
10{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
11{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
12{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
13{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
14{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
15{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
16{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
17{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
18{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
19{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
20{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
21{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
22{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
23{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
24{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
25{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
26{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
27{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
28{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
29{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
30{6}
check_id: "SQ-RESOURCE-INJECTION"
category: "prompt_injection"
severity: "MEDIUM"
title: "Resource metadata contains directives to the AI model"
subject_type: "server"
subject_name: null
31{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "LOW"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
32{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "cisa_check_cve_status"
33{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "cisa_search_kev"
34{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "cisa_list_reference"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/cisa-cybersecurity-mcp-server"
registry_content_sha256: "ce978504760c93f63ddf5e4f1808b721f527654b2eb72aeda9d9b904a382a48a"
scan_snapshot_fingerprint: "df6e5d2c19405416e56ad08d8ddd087257137e194975c291a55cd63e8d50448f"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:48.762Z"
observed_at: "2026-11-14T07:41:05.681+00:00"
registry_published_at: "2026-11-14T06:32:25.843295+00:00"
registry_updated_at: null