Starred repositories
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent …
Removes 20+ patterns of AI slop from any piece of writing.
Free, open-source web app for learning about ontologies and Microsoft Fabric IQ. Explore a catalogue of pre-built ontologies, design your own visually, export as RDF/XML, and share interactive diag…
GitHub Actions security scanner: pin actions to SHAs, detect script injection, audit permissions. Fix supply chain vulnerabilities.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command li…
A runtime substrate that turns an agent's execution into a reversible, Git-like trace, so meta-agents can observe, fork, replay, and revert any run. Couples agent and environments in a copy-on-writ…
List of AI Security benchmarks
Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI codin…
Model router for agentic systems. Routes every prompt to the right model in <50ms. Cut costs 40-70% with just an endpoint change.
Prompt-native interactive HTML docs — bdocs. Generate, comment on, and publish docs from inside codex &Claude Code.
Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
A plain-language writing skill for AI agents, with a revision view that shows what changed.
A codex plugin for running optimization loops inside a codebase. It is useful when you have a measurable target and many possible changes to try: test runtime, build speed, bundle size, model loss,…
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
Optimized Agentic and LLM Bulk Processing Over Your Data
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills b…
A local daemon-backed AWS temporary credential broker, exposed over a Unix socket and controlled via CLI.
Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.
Immutable, reproducible, least-privilege runtime environments for AI agents
Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize
Unified TUI for inventory, health-check, and track every API key issued across your AI providers.
Orchestrate sandboxed coding agents in TypeScript with sandcastle.run()