Local security layer for coding agents: keeps secret values out of what Claude Code, Codex CLI, Cursor and OpenCode send to their model, and checks untrusted text for prompt injection. MIT, runs on your machine, no account.
Enables MCP-compatible AI agents to scan code for leaked secrets, copyleft licenses, unprotected routes, missing privacy policies, and risky card handling before committing or shipping.
Enables AI coding assistants to scan every file they write before it reaches disk, blocking CRITICAL and HIGH security findings at generation time. Covers secrets, GitHub Actions AI-agent surfaces, prompt injection, Docker, Terraform, and package supply-chain risks.
Acts as a production-grade safety layer for AI-assisted coding, monitoring Git hygiene, scanning for security issues (PII, secrets, injection), and enabling semantic history search.