git-gud-security

kidsmeal/git-gud-security
★ 0 stars Python Security Updated today
Security scanner for repos, apps, and things built with Claude (skills, plugins, MCP servers). Runs as a Claude Code skill. 288 checks, 4 scan modes.
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "git-gud-security": {
      "command": "uvx",
      "args": [
        "git-gud-security"
      ]
    }
  }
}

Or install with pip: pip install git-gud-security

README Excerpt

A security scanner you point at a repo. It finds the holes people actually ship: a Supabase service_role key in the frontend, RLS left off "for dev", a committed `.env` with live keys, an MCP tool that runs `exec()` on a model-supplied string, a hook that POSTs your env to a remote. It runs as a [Claude Code](https://claude.com/claude-code) skill. It covers normal app security

Tools (4)

fullquickreadmeultra