#security
AuraWatch Enterprise Security
optirefine
Deterministic AST + Z3 Symbolic Code Security Scanner and Auto-Fixer.
pyobfus — Python Code Obfuscator
zhurong2020
Inline risk diagnostics + reverse-mapped stack traces for pyobfus, the open-source AST-based Python obfuscator. Open source, OpenSSF Best Practices verified, PEP 740 attested releases.
Cursor Privacy Shield
speedfenix
Protect private data before it reaches AI models. Scans prompts, blocks sensitive files, and audits what Cursor sends.
SpiderCob DLP — Secret & PII Scanner
spidercob
Real-time detection of secrets, API keys, and PII in your code. Runs fully offline.
vuln.mlab.sh SBOM scan
mlab-sh
Manually scan lockfiles for known CVEs via vuln.mlab.sh. No automatic scanning; you decide when a lockfile leaves your machine.
Prompt Compass
mpcfintech
Prompt router & firewall: keeps simple prompts on your local model, sends complex ones to the cloud, and blocks PII / jailbreaks. Uses the hosted Compass API.
DotCloak - Secure .env File Editor
wagekusuma
Secure editor for .env files with automatic secret masking, streaming protection, and privacy controls
KShield — Inline Security Scanner
YTTGlobal
Real-time inline security warnings, secret detection, and one-click fixes powered by your local KShield backend.
ExtShield — Zero-Trust Extension Monitor
AnandShah
Monitors file access, network calls, and secret usage by other installed VS Code extensions, and lets you set best-effort access policies per extension.
Keep
keep
Secure environment management from VS Code.
Envault
envault
Secure environment management from VS Code.
IjyaLabs DaaCini — Diagram-as-Code
ijyalabs
Live preview + SVG export for DaaCini diagrams-as-code, in VS Code / Cursor / VSCodium. Renders via the hosted IjyaLabs service by default, or your own self-hosted `daacini serve` (source in, SVG out — no engine bundled).