cc-audit
Active·★ 26·MIT·Updated 2026-10-21
cc-audit is a security auditor designed for Claude Code skills, hooks, and MCP servers. It scans third-party Claude Code artifacts to detect security vulnerabilities such as data exfiltration and privilege escalation before installation, closing a critical security gap in the rapidly growing Claude Code ecosystem.
#Security Audit#Vulnerability Scanning#Static Analysis#AI Code Security#Supply Chain Security#DevSecOps#CLI Tool
01
Features
01Extensive Security Rules
02Multi-Artifact Scanning
03AI Client Compatibility
04Remote Repository Analysis
05Automated Issue Remediation
02
Compatibility
Rust
Runtime
Verified via docs
Homebrew
Package Manager
Verified via docs
npm
Package Manager
Verified via docs
Linux
OS
Verified via docs
macOS
OS
Verified via docs
03
Quick start
1
$ cargo install cc-audit
04
Use cases
↳Preventing Data Exfiltration
↳Mitigating Privilege Escalation
↳Ensuring AI Supply Chain Security
↳Integrating into CI/CD Pipelines for automated security checks
↳Runtime monitoring of AI agent interactions
05
Alternatives
mcptrustchecker★ 172
Security scanner for MCP (Model Context Protocol) servers — reads the real published npm/PyPI source, not just metadata, to catch tool poisoning, prompt injection, toxic flows & supply-chain risk. Offline, deterministic A–F Trust Score, SARIF + CI gates.
agentshield★ 21
🛡️ The security firewall for AI agent tools & MCP servers (Claude, GPT-5.6, Gemini 3.7, Antigravity, Cursor, Codex, Hermes). Catch command injection, secret theft & toxic flows in <50ms. 100% offline Rust SAST + 1-click auto-fix + SARIF.
ai-security-tool★ 1.0k
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
mcpsec★ 27
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
hackmyagent★ 83
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
Comments
Log in to leave a comment
No comments yet. Be the first!