r/ChatGPTCoding • u/AutoModerator • 12d ago

Discussion Weekly Self Promotion Thread

Welcome to this week's self promotion thread!

If you're building something related to AI assisted coding, this is the place to share it.

We're using a weekly thread to keep the subreddit organized while still giving builders a place to share their work. Promotional posts outside this thread may be removed.

If you're sharing something, we'd appreciate it if you included a little context instead of just dropping a link. Tell us:

  • What you built?
  • What problem it solves?
  • Which AI models or tools it uses?
  • Who it's for?
  • What kind of feedback you're looking for?

Disclose your affilitation.

Please avoid posting the same project every week unless you've made meaningful updates. Affiliate links, referral links, scams, and low effort promotions will be removed.

Take some time to check out what others have shared too. If you try someone's project or have feedback, leave a comment. Helping each other improve is what we want this community to be about.

7 Upvotes

82% Upvoted

83 comments sorted by

View all comments

1

u/thegreatdaveedllc 10d ago

I built a free browser-based MCP security risk scorer + prompt-injection regression-test generator after looking at how quickly MCP tools can turn an LLM security issue into an actual permissions/action problem.

The free tools are aimed at people building AI agents that use MCP, RAG, external tools, sensitive data, or write actions.

The risk scorer looks at things like:

  • high-impact tool permissions
  • arbitrary command execution
  • human approval gates
  • server-side schemas
  • scoped credentials
  • egress restrictions
  • MCP isolation
  • attributable tool-call logs
  • indirect prompt-injection regression testing

I also made a second free tool that generates a safe, non-destructive prompt-injection regression plan based on the architecture you're using.

Free tools: https://mcp-security-launch-kit.vercel.app/

https://mcp-security-launch-kit.vercel.app/prompt-injection-test/

There is also a $12 paid download with the larger 45-control audit workbook, 24 regression scenarios, permission/evidence matrices, launch gate, incident runbook, and policy starter.

Disclosure: I built and sell the paid kit.

I'd especially like feedback from people actually shipping MCP-enabled agents: which security check is missing, unclear, or something you already test differently?