Search

🤫 Silent privacy guardian for agent workspaces. Auto-detects API keys, tokens, PII, and infrastructure info before git push or skill publish.

Quality gates for AI-generated code. Your code has been vettd.

Provides a Mongo store for the express-rate-limit middleware.

OS-level sandbox for pi using @anthropic-ai/sandbox-runtime, with an in-pi configure wizard, shift+tab toggle, and longest-prefix project configs.

keylab is a library aiming to create and validate JSON Web Tokens without hussle or prerequisitie cryptography knowledge.

Scoped alias for opencodecommit — install opencodecommit instead

Offline, in-process input/output safety guard for LLM apps (PII vault, prompt-injection, secrets, malicious URLs, package hallucination). Rust core, Node (napi) + edge/browser (WASM). Defense-in-depth, not a guarantee.

Offline, zero-dependency indirect prompt injection scanner for LLM applications.

Restrict admin pages using simple IP address rules

Scan a MCP repositories searching for prompt injection in tool descriptions that could lead to modifications in agents default behaviors

Unlock all your encrypted drives with one pass phrase.

Reverse engineered DSC ITV2 Protocol Client Library for TL280R Communicator - Monitor and control DSC alarm panels

Local and remote code-execution sandbox for Flyte / Union workflows.

Pre-commit secret scanner. Blocks API keys, tokens, .env files, and private keys from leaking into git. Ships as a Claude Code skill and a standalone CLI / git hook.

Fetch AWS Secret Manager Identifier.

OpenCode Plugin for SonarQube integration - Enterprise-level code quality from the start

A Node.js module for verifying email addresses

CLI tool to anonymize code using local LLM before sending to Claude Code

Module to prevent SSRF when making requests

JWT verifier with support for multiple JWKS endpoints and local fallback keys