Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites.
7 MCP servers
Security & TestingBy tylerscomic-lab
Free
Scan text and git diffs for committed credentials using real vendor key formats plus entropy.
Free
Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.
Free
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
Free
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
Free
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
Free
Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.
Free