Deterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.

Score agent manifests, generate CI workflows, and pull Clarx scan findings into your IDE.

Use ChatGPT Codex, Claude, Grok, Antigravity, Kimi, GLM, Cursor, Kiro, Copilot, Qwen, ERNIE, Spark, JetBrains, Perplexity, Replit, and Cody subscriptions as DeepSeek Harness LLM providers via OAuth.

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Audit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 16 other rule categories (300+ rules), returns an LLM-optimized report, then drives an iterative fix loop, mapping issues to source files, applying fixes, a

DeepSeek Harness 破甲一体化安全分析插件：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）

Use a Kimi Code membership in DeepSeek Harness through a dedicated Kimi subscription model route

Prompt-injection, jailbreak, and secret-leak detection with allow/ask/block interception for DeepSeek Harness: an Aho-Corasick pattern engine and heuristics ported from the Prompt-Injection-Payloads, Jailbreak-Detector, and Secret-Key-Leaker-Detect assets

Self-contained DeepSeek Harness (DSH) plugin for Provider/Auth login, model switching, image fallback, token/cost analytics, and same-port Web restart. Useful? A star helps.

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

MCP server for JADX-AI Plugin

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

Citepath public MCP server for LLM readiness audits and public scan results.

Enables checking whether a crypto link is a phishing lookalike of a wallet, exchange or dapp by comparing it against official domains and flagging lookalike characters, typosquats, punycode and bait words, fully offline. An optional paid full check adds domain registration age, DNS, redirect tracing and a page scan for seed-phrase prompts and drainer code.

Turns a Frappe site into a remote MCP server that AI clients such as Claude can sign in to with OAuth and use curated, task-level tools registered by installed apps. Every call runs as the signed-in user with that user's permissions, with schema-checked arguments and rollback on failure.