| name | demos-security-run |
| description | Run MCP security preflight and documented fallbacks for blit386-demos security workflows. |
Security Run (blit386-demos)
Same deterministic security workflow as the library repo, with demos-specific paths. Canonical runbook and script live
in blit386.
Usage
/demos-security-run
Steps
-
MCP preflight (required)
pnpm run security:mcp-preflight -- \
--mcps-dir "<cursor-project-mcps-path>" \
--repo-root . \
--allow-fallback \
--output-json security-reports/mcp-preflight-latest.json
Or via the library script:
node ../blit386/scripts/security/mcp-preflight.mjs \
--mcps-dir "<cursor-project-mcps-path>" \
--repo-root . \
--allow-fallback \
--output-json security-reports/mcp-preflight-latest.json
-
Repo-native checks
pnpm run security:audit
pnpm audit --prod --audit-level=moderate
pnpm audit --dev --audit-level=moderate
pnpm run preflight
pnpm run build (after dependency/toolchain changes)
-
MCP scans – only when corresponding servers are healthy (see library runbook).
-
Report – use template in
blit386/docs/security/security-runbook.md.
Periodic governance (monthly)
pnpm run security:mcp-preflight -- \
--mcps-dir "<cursor-project-mcps-path>" \
--repo-root . \
--governance-only \
--include-user-config \
--output-json security-reports/mcp-governance-$(date +%Y-%m).json
References