v1.0.0 · MIT License
Enables AI coding agents to inspect GitHub repositories and shell commands for download-and-execute payloads, obfuscation, typosquatted dependencies, autorun hooks, and fake-star signals before following or running them.
v1.0.0 · MIT License
Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.
v1.1.1 · MIT License
Enables Cursor and Codex agents to audit Agent Skill structure (frontmatter, broken links, missing files), analyze dependencies for undeclared, unused or vulnerable packages via OSV, and run 28 local bug and code-quality rules with SonarQube-style A–E ratings. It can also optionally pull issues, metrics and quality-gate status from SonarQube or SonarCloud, or scan and upload results.
v0.2.0 · MIT License
Enables MCP-capable AI agents to invoke 38 deterministic, private, auditable compute tools over stdio, covering PII masking, finance schedules, health, text, units, media, business, gaming, and scheduling without network access or dependencies.