Crumple
priberry-data/crumplelab
Audit AI coding agent setups and deployed apps for leaked keys, open data and risky config.
- GitHub stars
- 1
- tools
- 3
- transport
- STDIO
- last updated
- Nov 8, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
crumple_scanThe setup scan, local and instant.
The setup scan, local and instant.
No parameter schema in public metadata yet.
crumple_siteWhat a deployed app shows every visitor.
What a deployed app shows every visitor.
No parameter schema in public metadata yet.
crumple_traps
No parameter schema in public metadata yet.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageReadme
crumple: the crash test for AI coding agents
Crumple: crash-test your AI coding agent
Version 0.3. Needs Node 20+ and Docker (
scan,siteandsetupneed neither). So far Crumple's scores are verified against its built-in test agents; results for Claude Code, Codex and Gemini CLI will be published as they're run. Website: crumple.priberry.com · contact: crumple@priberry.com
Your AI agent can read your .env, run shell commands and touch your databases.
How fast does it break when someone plants a trap?
npx crumplelab scan # 5 seconds, no API key, nothing leaves your machine
npx crumplelab attack # the real crash test, in a throwaway container
npx crumplelab fix # harden it, then attack again to prove it
npx crumplelab site myapp.lovable.app # built your app with an AI app builder? check what it leaks
Details
- Repository
- github.com/priberry-data/crumplelab
- Website
- crumple.priberry.com
- Categories
- AI & LLM Tools, Data & Analytics
- Package
crumplelab- Transport
- STDIO
- Registry
- MCP registry, active
