Web Audit▌
by shen-zhihao
Web Audit scans Node.js package.json, runs npm audit, and creates markdown reports by severity for automated security as
Provides web-based security audit capabilities for Node.js projects by scanning package.json files, running npm audit commands, and generating structured markdown reports categorized by vulnerability severity levels for automated security assessment workflows.
best for
- / Node.js developers auditing project dependencies
- / Security teams reviewing frontend applications
- / Automated security assessment workflows
capabilities
- / Scan package.json files for vulnerabilities
- / Run npm audit commands automatically
- / Generate markdown security reports
- / Audit remote GitHub repositories
- / Categorize vulnerabilities by severity level
- / Analyze dependency chains and indirect dependencies
what it does
Scans Node.js projects for security vulnerabilities in dependencies using npm audit and generates structured markdown reports. Works with both local projects and remote repositories.
about
Web Audit is a community-built MCP server published by shen-zhihao that provides AI assistants with tools and capabilities via the Model Context Protocol. Web Audit scans Node.js package.json, runs npm audit, and creates markdown reports by severity for automated security as It is categorized under auth security, developer tools.
how to install
You can install Web Audit in your AI client of choice. Use the install panel on this page to get one-click setup for Cursor, Claude Desktop, VS Code, and other MCP-compatible clients. This server runs locally on your machine via the stdio transport.
license
MIT
Web Audit is released under the MIT license. This is a permissive open-source license, meaning you can freely use, modify, and distribute the software.
readme
Web Audit scans Node.js package.json, runs npm audit, and creates markdown reports by severity for automated security as
TL;DR: Scans Node.js projects for security vulnerabilities in dependencies using npm audit and generates structured markdown reports. Works with both local projects and remote repositories.
What it does
- Scan package.json files for vulnerabilities
- Run npm audit commands automatically
- Generate markdown security reports
- Audit remote GitHub repositories
- Categorize vulnerabilities by severity level
- Analyze dependency chains and indirect dependencies
Best for
- Node.js developers auditing project dependencies
- Security teams reviewing frontend applications
- Automated security assessment workflows
Highlights
- Works via npx without installation
- Supports both local and remote repositories
- CLI and MCP server modes