CLUSTER GITHUB-SECURITY-VULNERABILITIES · 11 ENTRIES · EARLIEST ENTRY 2026-03-15

GitHub repo security scanners for AI

This cluster consists of tools that scan GitHub repositories for security issues such as vulnerabilities, leaked secrets, and prompt-injection risks, often targeting AI agents or AI-generated code. The cluster's dated history is too thin to read a shape from—only 2 dated entries exist before the index start, and the rest are undated or from coverage after collection began. Traction is led by vibe-audit with 67 stars, while the other members show no star activity.

Entry timeline

ENTRY TIMELINE

FEB 2026: 1MAR 2026: 1AUG 2026: 4SEP 2026: 2OCT 2026: 3
FEB 2026OCT 2026

Members by activity

Activity signals, not revenue.

Build origin · 2 ai-built · 9 unlabelled

Operator · 4 hobby · 2 indie · 1 commercial · 4 unlabelled

Two labels per entry, never collapsed into one: how it was built, and who stands behind it. Counted over the 11 listed below. Unlabelled means nothing has decided yet — not that the answer is small.

  1. 01vibe-audit67★1 mo—hobbySecurity tool that audits vibe-coded projects for vulnerabilities before malicious bots find them.
  2. 02Luddite-Scout0★4 dayslivehobbySecurity scanner that checks GitHub repositories for vulnerabilities and prompt-injection risks before AI agents use them.
  3. 03secretdex-watch0★2 mo—commercialSubscription service that scans GitHub repositories for leaked credentials and sends email alerts on detection.
  4. 04pocanator0★2 days—Web application that turns GitHub security advisories and their fixing patches into educational vulnerability analyses.
  5. 05gitghost0★11 daysliveai-builthobbySecurity tool that scans repositories for exposed API keys and secrets in environment variables and files, with browser and pre-commit options.
  6. 06YouGit-AI0★14 days—WordPress plugin that scans GitHub repositories for secrets and sensitive code, redacts them, and publishes secure portfolio showcases.
  7. 07vibesafe-action7★5 moliveai-builtindieWeb tool and GitHub Action that scans AI-generated code repositories for security vulnerabilities and secrets, returning a safety score and fix prompts.
  8. 08forgectl0★1 mo—Tool that checks repository configuration against forge conventions and updates branch protection and CI variables on GitHub and GitLab.
  9. 09harness-score-web0★1 molivehobbyWeb scanner that analyzes a codebase or repository and produces a security or quality score for developers.
  10. 10CYBERDUDEBIVASH-PROFILE-THREAT-BEAST-SCANNER0★8 mostaleliveindieSecurity scanning service that checks social media profiles, websites, and GitHub accounts for exposure risks, data leaks, and reputation threats.
  11. 11GHScan — Is Your GitHub Repo Leaking Secrets?0★unknownliveBrowser-based security scanner that checks a GitHub repository for leaked secrets, dependency vulnerabilities, source map leaks, and homoglyph attacks.