Agent
A code-review agent that checks files for SQL injection, a flaw where user input changes a database query. SQL is the language commonly used to read and change database data.
974 25d ago A 25 tokens
original MIT
974Stars on the repository
60Mods indexed here, across every type
25d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Agent
A code-review agent that checks files for OS command injection, a security flaw where outside input can make a program run unintended operating-system commands. It uses rules and guidance from Japan’s IPA web-security documents.
974 25d ago A 28 tokens
original MIT
Agent
A code-review agent that checks files for directory traversal, a flaw where a path supplied by a user can reach files outside the intended folder. It follows security guidance from Japan’s IPA.
974 25d ago A 29 tokens
original MIT
Agent
A code-review agent that checks files for session-management weaknesses, such as unsafe handling of login sessions. A session is the state that keeps a user signed in across requests.
974 25d ago A 24 tokens
original MIT
05-xss
05Agent
A specialized code-review agent that checks for cross-site scripting, a web vulnerability where untrusted content is executed as code in another user’s browser. It follows Japanese IPA web-security guidance.
974 25d ago A 30 tokens
original MIT
06-csrf
06Agent
A code-review agent that checks files for cross-site request forgery, or CSRF. CSRF is an attack that tricks a signed-in user’s browser into sending an unwanted request.
974 25d ago A 34 tokens
original MIT
Agent
A specialised code-review agent that checks files for HTTP header injection, a web security flaw where untrusted input can alter response headers.
974 25d ago A 29 tokens
original MIT
Agent
A specialized code-review agent that checks for email header injection, a vulnerability where untrusted input can alter email headers. It follows security rules and Japanese IPA web-security guidance.
974 25d ago A 28 tokens
original MIT
Agent
A static security-checking sub-agent for clickjacking, an attack that places a real page beneath a deceptive page so a user clicks something different from what they see. It checks only the files assigned to it against defined inspection rules and security guidance.
974 25d ago A 23 tokens
original MIT
Agent
A security-checking sub-agent that performs static inspection for buffer overflows, where code writes beyond the memory reserved for a value.
974 25d ago A 26 tokens
original MIT