Extensions

Scan Gemfile and package.json for known vulnerabilities using OSV.dev

InfraMind

aryankapoor-keninjavelas

AI-native Infrastructure Intelligence for Modern DevOps

VDB — AI-aware Dependency Security

opstech

Flags slopsquatting, CVE, and registry risk in your package.json / requirements.txt / pyproject.toml / pom.xml / Cargo.toml / go.mod as you edit — powered by VDB.

Scan the active editor, selected text, or pasted content for prompt injection signals with automatic local backend startup.

PublishGuard

VladNoskov

Pre-publish safety scanner for npm packages and VS Code extensions — catches secrets, sensitive files, and metadata issues before you publish.

Extension Risk Scanner

SagarParmar

Scan installed VS Code extensions for malware, risky permissions, and supply-chain threats — local-first scoring, dashboard, and optional runtime protection.

LeakVault — AI Credential Guard

SylwesterUlatowski

Intercepts passwords, API keys, tokens and connection strings before they reach AI chat servers. Works with GitHub Copilot Chat, Claude Code, and Cursor.

PriviPaste

stackmindset

Local PII redaction for safer AI pair programming

Orix - Code Quality & Security Scanner

Orix

Scans for security vulnerabilities, AI-generated slop, and vibe-coded traits. Works on single files or entire workspaces.

Veilo — Secret & PII Scanner

veilo

Catch secrets, credentials & PII in your code before commit — 100% local, nothing leaves your machine.

Canary

yashgoyal

Catch secrets, broken .env hygiene, and insecure code patterns before commit.

ModelMux: AI CLI Model Manager

cherry-local

A secure visual model and provider manager for Codex, Claude Code, Gemini CLI, Grok Build, OpenCode, OpenClaw, and Hermes.