Audit GitHub repos for malicious and supply-chain code before you depend on them.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.