Scan the world (for secrets)

Security guardrails for Claude Code, MCP tools, and Claude cowork workflows. Local-first modular YARA-style guard packs for secrets, exfiltration, prompt injection, MCP abuse, and risky agent actions.

A zero-configuration npm wrapper for Gitleaks that automatically installs the binary and simplifies secret scanning in local hooks and CI/CD pipelines.

Open source local first security scanning CLI for repositories with zero manual setup.

A Claude Code skill that guides vibecoders and beginners from raw idea to a secured, GitHub-ready project, with real security checks, no false confidence, and no silent scope creep.

Local-first security scanner for AI-assisted coding. CLI, Web console, and GitHub Action.

Local-first AI-aware repository security auditor for secrets, vulnerabilities, policy gates, and ISO evidence support.

ContextOps toolkit for production AI agents. Compile, govern, scan, visualize & optimize LLM context before every model call — token budgets, policy governance, PII/secret scanning, Context Bill of Materials, diffing, Context MRI, MCP budgeting. Framework-agnostic. Local-first. Deterministic.

Agentic Security CLI Orchestrator // Cloud Secret & Neural AI Defense

Scans the real npm publish tarball before release and blocks leaks like source maps, secrets, internal files, and suspicious oversized artifacts.

Practical security risk scanner for open-source maintainers, focused on GitHub Actions, secrets, and repository hygiene.

Stop shipping CLAUDE.md, source maps, prompts, MCP configs, and secrets in AI-era release artifacts.

A clean, local-first CLI for 100% passive security auditing of JS/TS repos and URLs—secrets, dependency vulns, SAST, TLS/headers/cookies/CORS—built for streamable scan → merge → report workflows.

GitHub Action for automating Boom Token workflows using JavaScript. This action simplifies tasks like smart contract interactions, token analytics, and liquidity management for Boom Token on multiple networks.

Blocks secrets, credentials, and sensitive files before they enter an AI coding agent’s context window.

一句话开项目,自带 AI 专家级工程姿势的本地治理层 — guardrails for AI-assisted coding

Catch leaked secrets and frontend exposure in CI, with SARIF for GitHub code scanning

Privacy-first wrapper for Claude Code. Scans env for secrets before launch, hardens config, one-command launcher.

Reusable GitHub Actions security gate (SAST/SCA/SBOM/secrets) with a results dashboard and multi-team rollout docs.

AWS DevSecOps CI/CD Pipeline Using Jenkins, Terraform, IAM Roles, AWS ECR and AWS Secrets Manager