balasriharsha/shieldbot

Shieldbot is an AI-powered security scanner that runs directly inside Claude Code. It combines 5,000+ static analysis rules with Claude's reasoning to detect vulnerabilities, hardcoded secrets, and CVE-affected dependencies — then synthesizes findings into a prioritized, actionable report.

This repository also configures its own agents. See what shieldbot tells them →

3Stars on the repository
4Mods indexed here, across every type
4mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

shieldbot

01

balasriharsha/shieldbot

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 55 tokens together

AI-powered security code review agent. Combines CodeQL, Semgrep (5,000+ rules), bandit, ruff, detect-secrets, Trivy (Docker image scanning), Dependabot CLI, osv-scanner, pip-audit, and npm-audit to detect vulnerabilities, hardcoded secrets, and CVEs — then delivers a prioritized, actionable security report.

not rated 3 4mo ago A tokens not measured original MIT