Extensions

TaintFlow SAST

F1ZZ4N

Fast, Offline Static Application Security Testing (SAST) powered by Context-Sensitive Taint Analysis.

奇安信 SafeSkill 安全中心

safeskill-security

面向 Cursor、OpenAI Codex 和 Claude Code 的 Agent Skill 安全检测、自动监控与安装前防护插件。

Pinterest URL Audit

savepinner

Find unsafe or non-canonical Pinterest URLs and fix them without network requests.

Dockerfile Sanity — cache, root and secret checks with no setup

sujeito-operator

Flags the Dockerfile mistakes that cost you: COPY ordering that busts your build cache, containers running as root, secrets baked into layers, unpinned base images and apt bloat. Pure JavaScript, no hadolint or Docker install required.

yscript

yiqiua

YScript 语言支持：语法高亮、LSP 智能补全、悬停文档、跳转定义、代码片段（网安专用脚本语言）

LocalMask

localmask

Mask secrets & PII before any AI sees your code — 100% local. Key toggle real/masked view, in-editor review, teach-by-marking, masked mirror publish.

CodeCritic - AI code review

CodeCritic

AI code review for VS Code and Cursor - sidebar, scores, issues, Mark as done / Dismiss, Fix in Chat. Get an API key at code-critic.com.

LeakSnitch IDE

LeakSnitch

Detects and redacts sensitive data (API keys, passwords, tokens) before you commit or paste into AI tools.

AI Change Radar

qcodingdev

Local risk checks for AI-assisted code changes.

Netallion AI Assurance

netallion

Enterprise Agentic Development Governance — secret scanning, MCP trust governance, AI provider inventory, and policy enforcement for AI-powered IDEs

VibinGuard

vibinguard

Local security guard for AI-generated code before it reaches your workspace.

Keyhound — Secret & Auth Safety

keyhound

Warns you the instant a weak JWT secret, hardcoded API key, private key, or unsafe TLS setting sneaks into your code — because nothing else does.