codeinspectus
Synvoya/codeinspectus
Local security scanner for AI-generated JS/TS that combines Opengrep, Gitleaks and Trivy with checks for exposed secrets, Supabase RLS and prompt injection.
- Local integrations
Installation, supported tools and required credentials are maintained by the project.
Project details
- GitHub stars
- 49
- Language
- TypeScript
- License
- Apache-2.0
- Forks
- 10
- Latest release
- v3.3.118d ago
- Activity
- updated 18d ago
- Platforms listed
- macOS
- ai-generated-code
- ai-security
- appsec
- devsecops
- gitleaks
- local-first
- mcp
- opengrep
First MCP server?Start with the basics
Scan code for security vulnerabilities using Semgrep.
IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
JADX decompiler plugin providing live, LLM-assisted reverse engineering.
Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious agent behavior.
Locally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malicious code.
Dead code detection, security scanning and code quality analysis for Python, TypeScript and Go, with AI-assisted remediation.
Native Ghidra integration with GUI configuration, logging and no external dependencies.