Scan the world (for secrets)

Security guardrails for Claude Code, MCP tools, and Claude cowork workflows. Local-first modular YARA-style guard packs for secrets, exfiltration, prompt injection, MCP abuse, and risky agent actions.

A zero-configuration npm wrapper for Gitleaks that automatically installs the binary and simplifies secret scanning in local hooks and CI/CD pipelines.

Open source local first security scanning CLI for repositories with zero manual setup.

A Claude Code skill that guides vibecoders and beginners from raw idea to a secured, GitHub-ready project, with real security checks, no false confidence, and no silent scope creep.

Local-first AI-aware repository security auditor for secrets, vulnerabilities, policy gates, and ISO evidence support.

Local-first security scanner for AI-assisted coding. CLI, Web console, and GitHub Action.

ContextOps toolkit for production AI agents. Compile, govern, scan, visualize & optimize LLM context before every model call — token budgets, policy governance, PII/secret scanning, Context Bill of Materials, diffing, Context MRI, MCP budgeting. Framework-agnostic. Local-first. Deterministic.

Local-first DevSecOps audit CLI for SaaS, side projects, and internal apps. Runs trusted scanners locally or in CI and turns noisy results into readable reports.

Unified Rust CLI for secure, reproducible project packaging - ignore rules, secrets scanning, Ed25519 signing, and SBOM generation in one pipeline.

Agentic Security CLI Orchestrator // Cloud Secret & Neural AI Defense

LLM token optimization — prompt compression, output filtering, token estimation, secrets scanning. Cut costs 60-90%.

Practical security risk scanner for open-source maintainers, focused on GitHub Actions, secrets, and repository hygiene.

Scans the real npm publish tarball before release and blocks leaks like source maps, secrets, internal files, and suspicious oversized artifacts.

一句话开项目,自带 AI 专家级工程姿势的本地治理层 — guardrails for AI-assisted coding

Stop shipping CLAUDE.md, source maps, prompts, MCP configs, and secrets in AI-era release artifacts.

Blocks secrets, credentials, and sensitive files before they enter an AI coding agent’s context window.

GitHub Action for automating Boom Token workflows using JavaScript. This action simplifies tasks like smart contract interactions, token analytics, and liquidity management for Boom Token on multiple networks.

Local-first security hygiene scanner for Git repositories.

AWS DevSecOps CI/CD Pipeline Using Jenkins, Terraform, IAM Roles, AWS ECR and AWS Secrets Manager