AgentIndex icon
AgentIndex
cc-audit logo
cc-audit
★ 26
vs
tcpk logo
tcpk
★ 23

cc-audit vs tcpk

cc-audit: cc-audit is a security auditor designed for Claude Code skills, hooks, and MCP servers. It scans third-party Claude Code artifacts to detect security vulnerabilities such as data exfiltration and privilege escalation before installation, closing a critical security gap in the rapidly growing Claude Code ecosystem.; tcpk: TCPK is a portable Windows thick-client and MSIX security audit tool designed to find, verify, and report vulnerabilities in desktop applications. It offers static and dynamic analysis, a PowerShell engine, a WinForms GUI, and an optional agentic AI workbench for local triage.

01

TL;DR

cc-audit logo
cc-auditSecurity & Safety · ★ 26

Preventing Data Exfiltration

Read cc-audit full review →
tcpk logo
tcpkSecurity & Safety · ★ 23

Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables.

Read tcpk full review →
02

Side-by-Side Comparison

Field
cc-audit logocc-audit
tcpk logotcpk
Category
Security & Safety
Security & Safety
Stars
★ 26
★ 23
License
MIT
MIT
Install Command
cargo install cc-audit
git clone https://github.com/V33RU/tcpk.git && cd tcpk && .\TCPK.bat
Updated
1d ago
2d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
Security Audit, Vulnerability Scanning, Static Analysis
Thick Client Pentesting, MSIX Security, PowerShell
03

Features

cc-audit logocc-audit
01Extensive Security Rules
02Multi-Artifact Scanning
03AI Client Compatibility
04Remote Repository Analysis
05Automated Issue Remediation
tcpk logotcpk
01Evidence-based verification: Proves high-value findings with IL decompilation and taint checking, moving beyond simple regex hits.
02Real CVSS v4.0 scoring: Scores each finding with a faithful port of the FIRST.org algorithm, providing accurate context-specific CVSS scores.
03Supply-chain CVE detection: Matches shipped components against live OSV and NVD-by-CPE, embedding version-accurate vulnerabilities in a CycloneDX SBOM.
04Local-first AI triage (optional): Pipes findings through a local Ollama model for AI review, keeping decompiled IL within the local environment by default.
05Engagement-ready reports: Generates comprehensive reports in HTML, multi-sheet Excel, JSON, SARIF, CycloneDX SBOM, and `intel.html` dashboard formats.
04

Use Cases

cc-audit logocc-audit
↳Preventing Data Exfiltration
↳Mitigating Privilege Escalation
↳Ensuring AI Supply Chain Security
↳Integrating into CI/CD Pipelines for automated security checks
↳Runtime monitoring of AI agent interactions
tcpk logotcpk
↳Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables.
↳Compliance and vulnerability management: Generating comprehensive reports with CVSS v4.0 scores, CWE, MITRE ATT&CK, OWASP TASVS mappings, and SBOMs for regulatory compliance.
↳Threat intelligence gathering: Utilizing the `intel.html` dashboard and detailed findings to understand application security posture.
↳Automated static and dynamic analysis in pentesting workflows: Quickly performing initial assessments of thick client applications.
FAQ

FAQ

What is the difference between cc-audit and tcpk?
Both cc-audit and tcpk are in the Security & Safety category. cc-audit has 26 stars, while tcpk has 23 stars.
Which is better, cc-audit or tcpk?
The best choice depends on your use case. Choose cc-audit if Preventing Data Exfiltration, and tcpk if Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables..
Is cc-audit free or open source?
Yes, cc-audit is open source on GitHub (MIT).
Is tcpk free or open source?
Yes, tcpk is open source on GitHub (MIT).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to cc-audit →Alternatives to tcpk →cc-audit details →tcpk details →