Search

Static analyzer for Postgres Row-Level Security — 48 lint rules covering tenant and per-user row-scoping bugs, performance traps, and hygiene; 17 mechanically auto-fixable; semantic policy-diff command for CI gating; pytest plugin for RLS isolation tests with coverage.

A Node.js/TypeScript library for password security and account lockout policies.

JavaScript/TypeScript client for chat_secure_guard - End-to-End Encryption & Secure Storage

Applies best practice security headers to responses. It's a simplified port of HelmetJS

🛡️ 给 DeepSeek Harness 插件拍 X 光 —— DSH 插件安全体检与健康检查。静态启发式审计:代码执行、凭据访问、外传端点、混淆、安装脚本、bundle 清单合规,输出 0-100 风险分与裁决。Plugin security & health scanner for DeepSeek Harness: heuristic static audit (code execution, credential access, exfiltration, obfuscation, insta

Tekst.ai is an AI-powered platform meticulously engineered to revolutionize business communications by streamlining and optimizing the processing of emails, tickets, and chat data. The tool's primary mission is to transform unstructured communication into intelligent workflows, which in turn provides businesses with actionable insights and boosts operational efficiency. Through its AI-driven analysis, Tekst.ai automates processes while ensuring robust security. At its core, Tekst.ai focuses on

Codex skill for practical security audits of codebases, SaaS apps, APIs, and MVPs.

Claude Code skill for running structured security audits with actionable remediation plans

Secure storage abstractions for React Native - provides secure storage for sensitive data (encrypted seeds, keys) using react-native-keychain

Backend security middleware for Express.js (CSP, headers, rate limiting, VAPT baseline)

Security vulnerability skill — CVE search, dependency audit, risk scoring, remediation plans

Camera-resistant text rendering engine for HTML Canvas

Shannon is Keygraph’s open-source, autonomous AI pentesting tool for web applications and APIs. It runs locally from the command line, analyzes source code to identify attack paths, and performs live exploitation to validate vulnerabilities with reproducible proof-of-concept evidence before production release.

A Claude Code skill that starts by reading you: your own config, your notes, what you actually do all day. Then it hunts skills that fit, scores each out of 25, and never rates one it hasn't opened. The default answer is no.

Enterprise-grade threat actor intelligence and attribution system with 35+ specialized APIs

A simple CLI tool for encrypting and decrypting .env files

AI-powered vulnerability scanner plugin for Claude Code with 28 agents statically scan web & mobile repos for OWASP Top 10 / Mobile Top 10 vulnerabilities, validate findings, and optionally auto-fix them. No live requests, ever.

TypeScript library for parsing, signing, and verifying signed, versioned agent skills used in model-driven orchestration.

Policy enforcement, approval gates, and audit trails for OpenClaw — govern tool inputs before execution, scan outbound messages for PII/secrets, and record agent activity for review and compliance

Fail-closed LLM gateway with durable signed forensic evidence and bounded response enrichment