raccioly/websec-validator

Local-first security recon for AI coding agents: map attack surfaces, stage tailored probes, and produce a fact-grounded brief. Part of the Guard family with DocGuard and TestGuard.

This repository also configures its own agents. See what websec-validator tells them →

2Stars on the repository
4Mods indexed here, across every type
todayLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

websec-validator

01

raccioly/websec-validator

Plugin Claude Code

Bundles 1 skill, 1 hook · 132 tokens together

Defensive, local-first security recon that briefs your AI coding agent on your OWN codebase. Read-only by default: facts + tailored probes + a calibrated findings ledger, code-in / artifacts-out, no LLM / no server / no running app. Live probes are opt-in against a TEST instance you own; production is out of scope.

not rated 2 today A tokens not measured original MIT