Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Repository Index
47,133 repositories indexed
1–24 of 39 · Most stars
Most advanced XSS scanner.
Web path scanner
Exploitation Framework for Embedded Devices
The recursive internet scanner for hackers. 🧡
the LLM vulnerability scanner
Bandit is a tool designed to find common security issues in Python code.
Automated Αll-in-One OS command injection exploitation tool.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Loki - Simple IOC and YARA Scanner
Automated NoSQL database enumeration and web application exploitation tool.
Find web directories without bruteforce
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
A modular vulnerability scanner with automatic report generation capabilities.
Evaluate OMR sheets fast and accurately using a scanner 🖨 or your phone 🤳.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
A friendly car security exploration tool for the CAN bus
Modular file scanning/analysis framework
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.