Tag
Epherem 是一款免费的源代码安全扫描工具，专为 AI 构建的应用设计，可检测认证、数据库访问、API 密钥泄露和依赖漏洞等问题，并支持导出报告给 Claude Code、Cursor 等 AI 编码助手。
The author introduces shrine, a CLI tool for pre-deploy security scanning that detects leaked API keys, secrets, and misconfigurations in codebases. It's in beta and seeking feedback from developers.
CodeFlow is a browser-based tool that visualizes code dependencies from a GitHub URL or local folder, providing interactive graphs, security scanning, pattern detection, and health scores without uploading code.
Lovable has shipped a new security scanner that runs before every deploy, catching misconfigurations, missing RLS policies, and cloud gaps, with automatic fixes and deep scan capabilities.
NVIDIA released SkillSpector, an open-source security scanner for AI agent skills that detects vulnerabilities like prompt injection and data exfiltration before installation.
Agentlas introduces a hierarchical multi-agent architecture to eliminate infinite loops, offers guided agent creation through interviews, and includes a security scanner for reviewing agents before installation.
Velonus is an open-source AppSec scanner for Python that runs five security tools in one command, normalizes findings, and deduplicates noise, with support for SARIF output and CI integration.
Trivy is a comprehensive, open-source security scanner by Aqua Security that detects vulnerabilities, misconfigurations, secrets, and license issues across containers, filesystems, git repos, and Kubernetes.