Turns your coding assistant into a security scanner that checks your codebase for vulnerabilities such as business logic flaws, insecure file uploads, GraphQL injection and hardcoded secrets, without any third-party tools. Works with Claude Code, Codex, Cursor and other agent-skill assistants.
@utkusenPerform codebase analysis and architecture mapping as the first phase of a security assessment. Explores the tech stack,…
@utkusenDetect business logic vulnerabilities in a codebase using a three-phase approach: threat modeling (domain analysis and attack…
@utkusenDetect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites),…
@utkusenDetect GraphQL injection vulnerabilities in a codebase using a three-phase approach: recon (confirm GraphQL usage and find unsafe…
@utkusenDetect hardcoded sensitive data (API keys, access tokens, private keys, passwords, etc.) in publicly accessible code — frontend…
@utkusenDetect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find…
@utkusenDetect insecure JWT (JSON Web Token) implementations in a codebase using a two-phase approach: first map all JWT issuance and…
@utkusenDetect missing authentication and broken function-level authorization vulnerabilities in a codebase using a three-phase approach:…
@utkusenDetect path traversal vulnerabilities in a codebase using a three-phase approach: recon (find file-loading sinks with dynamic…
@utkusenDetect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase approach: recon (find dangerous execution…
@utkusenConsolidate all SAST vulnerability results from the sast/ folder into a single final report ranked by severity and…
@utkusenDetect SQL injection vulnerabilities in a codebase using a three-phase approach: recon (find unsafe SQL construction sites),…
@utkusenIs this you? Claim your profilePut a plugin at the top of Plugins, from $9
