Every repository in order of discovery. A red NEW tag marks anything catalogued in the last 48 hours.
Evidence-driven Java security review workbench
Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.
Audit AI agent tool-call transcripts: hash-chain sealing, deterministic replay, and scope overreach checks. Dependency-free Python CLI.
Zero-install, air-gapped, self-decrypting HTML vaults using AES-256-GCM and native WebCrypto.
Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
Your Google services (RCS, Google Wallet, DroidGuard timestamps, Play Integrity attestations, Play Protect Certification) read on-device. No internet, root required.
Salesforce DX code review: Apex, LWC, Flows, security (CRUD/FLS), governors, and Bugbot.
Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE and tool calls.
FastAPI service for Stellar account screening, Soroban event monitoring, and network health.
Auto mode for every coding agent, built on Jev: risk-scores every tool call with session context (deny / ask / allow), flags prompt injection in results, checks skills and plugins. Claude Code, Codex, Copilot, Gemini, Cursor, pi, OpenCode, ACP.
Soroban contract for authorized Stellar Sentinel flags, configurable thresholds, and latest-flag records.
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.
ARTEX 한국어판 ·AI 기반 침해사고 대응 기능 추가 (upstream: Autumn-27/ARTEX, AGPL-3.0)
数据面具 Data Maskit — 专为大模型打造的本地隐私脱敏网关（请求自动打码，回复流式还原；支持 Cursor / Claude Code / Codex / Pi 等任意可配 Base URL 工具）
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
Meme雷达开源版：本地只读、多链 Meme 候选扫描与人工复核工具
Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Diagnose SQLite WAL misconfiguration — lock contention, unbounded WAL growth, checkpoint starvation.
Detect drift between a SQLite FTS5 index and its content table, which integrity-check does not catch.
Flag ATTACH DATABASE footguns — cross-database atomicity, alias shadowing, ambiguous unqualified tables.