Resources

Practical security. Open source.

Tools to help you understand what you’re trusting and bring security checks into the way you build.

Open-source tools

Free to use · MIT licensed

Before you install

Is This Safe

Check an unfamiliar skill, plugin, or agent server before giving it access to your code and tools.

A prompt you paste into your AI coding agent.
No installation required.

View on GitHub

Understand what you’re allowing.

  • What could run when you install it?
  • Where could it send your data?
  • What would it be able to change?

How to start

Open the audit prompt on GitHub, add the repository URL, and paste it into your agent’s chat before installing the tool.

Reviews the source without running the target. Reports findings and checks it couldn’t complete.

While you build

AI Security Skills

Give your coding agent specific security checks to apply as it writes and changes code.

Reusable instructions for your AI coding agent.
Choose and install the skills you need.

View on GitHub

Catch common gaps in generated code.

  • Check that packages exist and versions are current.
  • Question insecure defaults and common shortcuts.
  • Identify security controls the feature needs.

How to start

Read the skills on GitHub, then follow the installation instructions for your coding agent. You can review the repository with Is This Safe first.

Helps your agent look for specific mistakes. Findings still need review in the context of your application.

In development

Platform security guides

Step-by-step walkthroughs to help you configure your platforms, check that protections work, and understand the risks that remain. Not available yet.