All projects
Repositories in this selection 6 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—NNVIDIA / SkillSpectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.PythonApache-2.0 · PermissiveInsufficient rank history23,9752,069——2026-11-02
2—Pperplexityai / bumblebeeRead-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.GoApache-2.0 · PermissiveInsufficient rank history5,137461——2026-11-02
3—Nnolabs-ai / nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxingRustApache-2.0 · PermissiveInsufficient rank history4,815327——2026-11-02
4—Sstep-security / harden-runnerHarden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.TypeScriptApache-2.0 · PermissiveInsufficient rank history1,295123——2026-10-27
5—MMustacheCase / zanadirOpen-source CI/CD security tool: finds the security checks your pipeline is missing, and the ones that can never fail the build. GitHub Actions, GitLab CI and more.GoMIT · PermissiveInsufficient rank history18117——2026-11-03
6—Jjitpass / jitFind the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.GoNOASSERTION · Restricted / unknownInsufficient rank history1634——2026-10-05
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.