Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
47,133 repositories indexed
1–12 of 12 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Tool to look for several security related Android application vulnerabilities
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
- smart-contracts
- erc20-tokens
- vulnerabilities
- solidity
Operational information regarding the 2026 php2shell vulnerabilities
Spot vulnerabilities in postgres SQL scripts
- postgresql
- security
- python
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
- actions
- bugbounty
- cicd