ai-code-security

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Software Composition Analysis (SCA) and SBOM test benchmark repository for Gadriel AI Code Assurance.

Gadriel AI Security Harness for GitHub Copilot — local MCP server, prompts, and instructions for SAST, SCA/SBOM, secrets & OWASP LLM security scanning.

Gadriel AI Security Harness for OpenAI Codex — local MCP server and hooks for SAST, SCA/SBOM, secrets & OWASP LLM security scanning.

Gadriel AI Security Harness for Claude Code — local SAST, SCA/SBOM, secrets, container, config & OWASP LLM security scanner via MCP.

Pre-commit security gate for vibe coding — blocks hardcoded secrets, SQL/XSS injection & Supabase misconfigs in AI-generated code. 100% local, no LLM.

A vulnerable by design repository to show various CBOM and quantum-vulnerable usage

Find security risks in Python and JavaScript code. Understand the findings. Fix them.

Catch hallucinated and typosquatted imports before they run. Resolves Python and JS/TS imports against stdlib, manifest, and local modules; flags slopsquatting typosquats of popular packages. Offline pre-commit gate and Claude Code skill. Stdlib only.

Gadriel AI Security Harness for Cursor — local MCP server, rules, and edit hooks for SAST, SCA/SBOM, secrets & OWASP LLM security scanning.

Gadriel AI Security Harness for VS Code — local SAST, SCA/SBOM, secrets, container, config & OWASP LLM security scanner and MCP server.

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents. MCP server, docs for the leakrank-guard npm package.

Gadriel AI Security Harness plugins for Claude Code — local SAST, SCA/SBOM, secrets & OWASP LLM security scanning via MCP.