AG-015: Supply Chain Risk

What this rule means

MCP servers installed without version pinning, integrity checks, or verification.

Why it matters

Postmark MCP attack (Sep 2025): npx -y auto-installed malicious version.

How to fix it

Pin versions (@1.2.3), use lockfiles, verify checksums.

Detect it

pip install lucin
lucin scan .                  # all rules
lucin explain AG-015          # this rule, in your terminal

Findings carry a file:line and, where the rule supports it, a witness path showing the flow that triggered it. Precision and recall for the whole rule set, with the commands that regenerate them, are on the benchmarks page — and the gaps are on limits.

← All detection rules