This runs the real static-analysis engine from mcp-scanner — the exact same rule files, compiled to WebAssembly and executed entirely on your device. Nothing you paste here is sent anywhere.