Havuz

AutoCVE, kaynak kodu üzerinde agent tabanlı güvenlik denetimi yapıp bulguları doğrulamayı ve CVE başvuru raporları üretmeyi amaçlayan bir platformdur.

Neden yükseliyor · 104 günde 1416 yıldıza ulaşmış olması ve README’de 14 projede bir haftada 30 güvenlik açığı bulup başvuruya sunduğu iddiası dikkat çekiyor. Ancak yıldızlar ve README’deki sonuç beyanı tek başına etkinliğin kalitesini veya tekrarlanabilirliğini kanıtlamaz; son 28 gündeki 4 commit ve 2 farklı yazar aktivitenin sınırlı olduğuna işaret ediyor.

PentesterFlow, penetration tester’ların terminalden AI destekli güvenlik testleri yürütmesine, bulguları kanıtlarıyla kaydetmesine ve oturumlar arasında bağlamı korumasına yardımcı olan bir CLI’dır.

Neden yükseliyor · 119 günde 1377 yıldıza ulaşması, agentic AI ile penetration testing’in kesişimine ilgi olduğunu gösteriyor; ancak yıldızlar benimsemenin veya ürün kalitesinin kanıtı değil. Son 28 günde 5 commit ve 1 farklı yazar görünmesi, yıldız artışına kıyasla geliştirme etkinliği ve katkıcı çeşitliliği için sınırlı kanıt sunuyor.

三个 AI 客户端的内置提示词一键替换：DSH / WorkBuddy / ZCode。双击即用、可自证、改前备份、一键还原。v8.29：卡片式界面、登录强制激活码、DSH 插件自动注入、官方群验证。免装 Python 单文件 exe，完全免费开源。

Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, er

DianXing - AI-Driven End-to-End Code Security Auditing

55 rigorous skills for Claude Code, Codex, OpenCode 1 and 2, and Pi: code review, security audit, feature development, frontend design, MCP

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

A workflow harness that helps AI coding agents plan, review, test, and ship safer code.

A practical Codex skill for evidence-backed repository health audits

Security checklist for vibe coded apps. AI rules file + automated audit + manual verification.

macOS companion toolkit for power users

Laravel Security Tool

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

A Claude Code skill that plays bouncer at the door of production: audits AI-built apps (Lovable, Bolt, v0, Cursor) across 5 domains and hand

Audit and fix your Mac's security in one command. No agent, no signup, open source.

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rus

Supabase RLS checker and security scanner for Vercel + Supabase apps (CLI + MCP server): tables without RLS, using (true) policies, service_

🦞 Local, read-only security audit for your OpenClaw agent. Finds config, prompt-injection and supply-chain risks, watches for drift, and ve

Kit de la clase Adversarial Review (Imperio Agéntico): app de demo con 43 fallas + prompts de auditoría UI/UX/seguridad + checklist + report

Audit, clean, and harden a WordPress site end to end, with an AI agent (Claude/Cursor/Codex/MCP or SSH). Detects & removes hidden malware —

Claude Code production-readiness audit plugin with 8 specialist lenses in 3 waves for security, reliability, tests, DevOps, live-app QA, and

Your AI works the night shift — read-only reviews of your projects while you're busy, one digest every morning.

Runtime security for AI agents. In-process, zero dependencies, Apache 2.0.

Engineering best practices that AI coding agents actually apply — 40+ skills, from secure coding and cloud to compliance and UX writing. BUI

Local-first AWS cost analysis and evidence CLI. Read-only by construction.

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

A Claude / AI security review prompt for shipping safe apps. TRAP (True Readiness Audit Prompt) turns Claude Code, Cursor, or Copilot into a

A Collection of Defensive Cyber Security skills designed to harden your Software, Infrastructure and even Game.

An agents skill for auditing Ruby on Rails applications, identifying security issues, code quality problems, and common misconfigurations.

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.