security-guidance

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• io.github.aks129/healthclaw-guardrails 34 ★
  Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
• Prism Scanner 28 ★
  Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
• AI Guard 19 ★
  Guardrails for AI-written JS/TS: scans, weakened-test checks, package checks, verify before done.
• ToolTrust Scanner 19 ★
  Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
• aikido 15 ★
  Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikid