supply-chain-monitor

Supply Chain Monitor Automated monitoring of the top PyPI and npm packages for supply chain compromise. Polls both registries for new releases, diffs each release against its predecessor, and uses an LLM via Cursor Agent CLI to classify diffs as benign or malicious. Malicious findings trigger a...

awesome-security-vul-llm

Awesome Security Vulnerability ProjectBy LLM Project Introduction This project uses a large model combined with a crawler to retrieve all projects on GitHub that contain valuable vulnerability information, vulnerability POCs, or rule information. It automatically identifies the project's director...

vuln-scanner

vuln-scanner An automated vulnerability assessment platform that orchestrates 210 open-source security tools , aggregates and deduplicates findings, optionally chains tools into a discovery data-flow graph , runs an optional OpenAI-compatible LLM analysis layer for triage, clustering, and...

postEX

PostEX - Post-Exploitation Recon Agent For authorized security testing only. Unauthorized use is illegal. PostEX is a Python-based post-exploitation reconnaissance agent for Windows. It collects system information, privilege status, installed patches, defense mechanisms, network configuration,...

ShunyaNet-Sentinel

ShunyaNet Sentinel v3.3 - MAJOR UPDATE UPDATED: 10/22/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds breaking news, social media, government alerts, sends them to an LLM for analysis, and delivers alerts and summary reports to the GUI and your notificati...

jadx-ai-mcp

JADX-AI-MCP Parte de Zin MCP Suite ⚡ Servidor MCP totalmente automatizado + plugin de JADX creado para comunicarse con LLMs a través de MCP para analizar APKs de Android usando LLMs como Claude: descubre vulnerabilidades, analiza APKs y realiza ingeniería inversa sin esfuerzo. ⭐ Contribuyentes...

PrivAudit: A Dual-Lens Auditing Framework for Website Privacy Practices under the CCPA

Five years after the enforcement of the California Consumer Privacy Act CCPA, understanding how website privacy practices evolve at scale in response to regulation remains a key challenge for both researchers and regulators. Prior work and regulatory efforts have focused on manual and case-specif...

skill-scanner v2.0.14

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...