Risk Audit
Scans code for common security issues like XSS, injections, and path traversal, providing grouped results and suggested fixes.
About
Risk Audit is a local-first security scanner designed to help developers identify and remediate common vulnerabilities in their code. Operating entirely offline with zero network calls, it offers quick feedback on potential pitfalls such as XSS, injections, SSRF, and path traversal. It presents findings in clear, severity-grouped results with practical suggestions, making it ideal for both beginners seeking actionable security guidance and experienced developers looking for a fast, local scan to integrate into their workflow or MCP-enabled tools.
Key Features
- Scans for common security issues (XSS, injections, SSRF, path traversal)
- Runs locally and offline with zero network calls, ensuring code privacy
- Provides clear, severity-grouped results with practical fix suggestions
- Functions as both a command-line interface (CLI) and an MCP server
- Configurable via .vibecheckrc for filtering severity, including/excluding paths, and managing rules
- 0 GitHub stars
Use Cases
- Quickly identify and fix common security vulnerabilities in codebases
- Integrate security scanning into development workflows or CI/CD pipelines
- Provide real-time security feedback to developers within AI-powered IDEs or assistants
Sponsored