SecureAI-Scan

SecureAI-Scan An offline scanner for the code that talks to LLMs, MCP servers, vector stores, and Agent Skills. It finds prompt injection, MCP command injection and path traversal, RAG data leaks, and poisoned skills, and it proves each finding with a source → sink trace through your real imports...

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

skill-scanner

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...

CVE-2024-22263_Scanner

CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by unknown CVE via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: unknown CVE Source advisory: OSV:GHSA-VPP8-G58W-M8MP...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by CVE-2026-83813 via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: CVE-2026-83813 Source advisory: OSV:GHSA-JJ36-9PVH-VJ5R...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by CVE-2026-115776 via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: CVE-2026-115776 Source advisory: OSV:GHSA-53XC-49M8-P798...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by CVE-2026-115778 via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: CVE-2026-115778 Source advisory: OSV:GHSA-CWM5-JH59-MWXR...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by CVE-2026-115877 via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: CVE-2026-115877 Source advisory: OSV:GHSA-Q7QQ-6MHP-9RC4...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by CVE-2026-106454 via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: CVE-2026-106454 Source advisory: OSV:PYSEC-2026-4304...

Purpose IR: Compiling User Purpose for Privacy-Preserving Agent Workflow State

LLM-agent workflows routinely transform rich observations into plans, summaries, memories, handoffs, and other reusable state. This creates a privacy boundary that task relevance alone does not capture: an observation may be needed as evidence for a task without its full semantics being authorize...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by CVE-2026-106454 via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

dataflow-airflow (2.10.10) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (19.0.0)

apache-airflow-providers-google PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dataflow-airflow 2.10.10 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

ship-safe v10.1.0

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-82355 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-82355 Source advisory: OSV:PYSEC-2026-3989...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-75158 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-75158 Source advisory: OSV:PYSEC-2026-3988...

dataflow-421 (>=0.1.8, <=0.2.12), easyroutine (>=1.1.1, <=1.1.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.51.1)

transformers PYPI version 4.51.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dataflow-421 =0.1.8, =1.1.1, =1.0.10, =1.18.0, =1.27.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

dataflow-airflow (2.10.3) potentially affected by CVE-2026-48828 via apache-airflow (2.10.3)

apache-airflow PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - dataflow-airflow 2.10.3 Source cves: CVE-2026-48828 Source advisory: OSV:PYSEC-2026-3806...

muad-dib v2.12.0

Installation | Usage | Features | VS Code | CI/CD Version francaise Why MUAD'DIB? npm and PyPI supply-chain attacks are exploding. Shai-Hulud compromised 25K+ repos in 2025. Existing tools detect threats but don't help you respond. MUAD'DIB combines 22 parallel scanners 278 detection rules, a...

SecureAI-Scan v0.10.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...