Audit GitHub repos for malicious and supply-chain code before you depend on them.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
EVM contract/token risk check + ERC20 approval (proxy, EIP-7702, unlimited-allowance). Zero deps.