Palladiymateria / sharecheck
Local CLI that checks your project for accidental secrets, sensitive files, and oversized assets before publishing to GitHub. No uploads. No runtime dependencies.
Palladiymateria / sharecheck
superdesigndev / treg
OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn
GitGuardian / ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
scito / extract_otp_secrets
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
pypa / gh-action-pypi-publish
The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish
hashgraph-online / hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
MaxHu-xuan / chat-archive-guard
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
duriantaco / skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
blacklanternsecurity / badsecrets
A library for detecting known secrets across many web frameworks
Aletheore / Aletheore
Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.
graygnatconsole / mcp-audit-tool
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
shea256 / secret-sharing
A system for securely splitting secrets with Shamir's Secret Sharing Scheme
jasonzhang06-source / sharelint
Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.
duy90utc528 / repo-publication-audit
Dependency-free preflight checks for repositories before making them public
AnuragRoy485 / Sleuth
Sleuth finds hardcoded secrets, API keys, tokens, private keys and high-entropy strings in your codebase fast, accurately, and with beautiful output.
VanTaS15 / RotationLedger
Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.
GetSHIM / shim-cli
Local traffic visibility and privacy controls for coding agents. See what Claude Code, Codex and Copilot send to the model; mask secrets and personal data where the client allows it.
rootsecdev / SecretsStalker
—
Nour-yahyaoui / env-sentry
Zero-dependency CLI that catches .env drift, leaked secrets, and missing .gitignore entries before you commit them.
shriramkv / agentgateway-lint
Static linter for agentgateway configurations that detects security, reliability, and operational risks such as unsafe CORS, missing authentication/rate limits, hardcoded secrets, and exposed admin interfaces. Supports YAML and JSON with precise issue locations.