zacarx-java-sink-tracer
Analyzes Java applications for security vulnerabilities by tracing data flow through parsed code to identify potential SQL injection, XSS, and other security sink points with automated vulnerability reporting and code extraction capabilities.
- Score
- 90.9322 signals
- Evidence
- 117 stars · 13 forks
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- cyfrin-aderyn794 stars · 117 forks97.467
- semgrep685 stars · 56 forks96.884
- jexinsam-mssql-database-manager58 stars · 28 forks90.026
What it is
MCP server Java Sink Tracer, catalogued on PulseMCP. Analyzes Java applications for security vulnerabilities by tracing data flow through parsed code to identify potential SQL injection, XSS, and other security sink points with automated vulnerability reporting and code extraction capabilities.
When to use it
Analyzes Java applications for security vulnerabilities by tracing data flow through parsed code to identify potential SQL injection, XSS, and other security sink points with automated vulnerability reporting and code extraction capabilities.
Notes
Listed from the PulseMCP registry. The registry does not state a license. Check it before production use.