#secret-scanning

Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.

Eight security skills for Claude Code with no dependencies: standard library only, tested, and usable as a CI step. Secret scanning, Python SAST, prompt-injection testing, plus HTTP, JWT, Dockerfile, CORS and dependency auditing.

Keeps secrets and PII out of the cloud model. Hook plugin for Claude Code/Codex with a local vault.

Kill-tested guard skills for AI coding agents , self-invoking quality gates that catch AI failure modes in security, tests, docs, dependencies, and diffs before the agent says "done." Works with Claude Code, Codex, and Cursor.

Stops you from accidentally git-pushing API keys and passwords. One command to install: a tiny hook checks every push before it leaves your machine, blocks real secrets, and uses AI to avoid false alarms.

Agent skills for running security scans — secret scanning (gitleaks), dependency CVE audit (npm/cargo/osv), SAST (semgrep), and a composed pre-release gate. Grounded SKILL.md runbooks for Vanta / Claude Code / any skill-aware agent. MIT.

Security scanner for AI-generated code — GitHub Action + CLI wrapping Semgrep, Gitleaks, and an AI-agent-specific rule pack.