#security

PG Memory Bank

pgdigitalglobal

Memory-bank governance and production-readiness checks in your editor. Code narration, security and frontend policy gates, and TapSign device-bound approval.

IAPL - Profile FLS

ion-andoni-palma

Manage Salesforce profile FLS in git: retrieve permissions from any authorized org and upsert into repo profiles.

Start and monitor the local Agent Loop Guard gateway from VS Code.

Debuggatha

SxnnysideProject

The engineering reviewer that remembers — every finding traced to a real rule, tracked from open to resolved, judged against the repo you actually wrote.

Local-first data-loss prevention for developers. Redacts API keys, secrets, PII, and CUI markings before code or text reaches AI assistants like Copilot, ChatGPT, or Claude. 65+ patterns, air-gap friendly, zero telemetry.

Mutant Language Tools

aoiflux

Language tools for Mutant, powered by a dedicated language server: strict canonical formatting, rich diagnostics (OS-aware platform warnings, unreachable code, unused/undefined/duplicate checks, semicolons), hover with capability categories, completion, semantic highlighting, go-to-definition, refer

Scrutora Scan

Scrutora

Offline DPDPA / HIPAA / GDPR / PCI-DSS / RBI compliance scanning for Azure Pipelines. No API key; your code never leaves the agent. SARIF output.

Tegin Env Manager

teginsoft

Compare .env, .env.local, .env.production and other env files side by side in a table, spot missing variables at a glance, and generate .env.example in one click.

Passwords

passwordslu

Generate passwords, passphrases, PINs, API keys, and usernames in VS Code. From passwords.lu — local generation and strength checks, optional breach lookup, copy/insert/share via PrivateNote.

Thesmos Governance

holleystudio

Real-time AI repo governance — inline findings, health scores, and adapter sync for Claude, Gemini, Cursor, Copilot, and Codex.

oauthlint

auspeo

Catch the OAuth/OIDC/JWT/MCP anti-patterns AI coding tools produce across eleven languages (JS/TS, Python, Go, C#, and more) plus mobile (Swift/iOS, Android), right inside VS Code, Cursor, Windsurf, and other VS Code forks.

DepAnalyzer Security

DepAnalyzerUPT

Detecta dependencias vulnerables y desactualizadas desde Visual Studio Code.