#secret-detection
SAST
InsomniaSAST
Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.
Guardian — Glassworm & Malware Scanner
ankushlokhande
Glassworm & malware scanner for VS Code. Detects malicious workspace tasks, injected configs, fake fonts, and stealth propagation scripts across Git branches.
Rakshex
RaksHex
Stop AI agents from burning your API budget. Find leaked keys, hidden costs, and security risks in VS Code — first scan in 60 seconds.
RepoScope — AI Cost Intelligence & Security Scanner
nxgentech
See what your AI subscription actually costs you — per file, per prompt, per month. RepoScope shows which files burn the most tokens, audits your .cursorrules for bloat, and projects when your Cursor Pro or Claude Pro plan runs out. Free: 44-detector security scanner (secrets, XSS, SQL injection) +
SecretGuard - Secret Detection
secretguard-cli
Real-time secret detection — catches API keys, tokens, and credentials as you type
DevLeakShield
mathan0072007
Leak-reduction clipboard and AI workflow protection for VS Code