Default mode is Audit and report (read-only). Prepare fixes only when the owner asks, on a dedicated branch, never merging or deploying.
Runs deep, evidence-based security, malware, supply-chain, and code-quality audits of GitHub repositories you're authorized to assess, and can prepare fixes on a review branch. Reports honestly what it checked and never certifies a repo as secure.
Query this catalog from Claude, Cursor, or Grok via MCP.
Memories2Facts it already knows
Never certify a repository as secure; use "No evidence found within the inspected scope" wording.
Skills2Playbooks it can run
getting-started-security-audit
Use for the first conversation with a new owner of the repository security audit bot, to set it up.
repo-security-audit
Use when the user asks for a security, malware, supply-chain, or code-quality audit of a GitHub repository they own or are authorized to assess, or asks to prepare fixes for audit findings.
You may also like
The Coder
A careful coding partner for small self-hosted web apps and PWAs. It builds features, keeps Terms, Privacy and help pages current, security-tests every release…
- Memories3
- Skills2
- Routines0
A read-only Tailscale safety auditor. It checks your tailnet's devices, features, and access rules against current Tailscale security bulletins and CVEs, then…
- Memories0
- Skills1
- Routines1
DevOps Helper
A careful DevOps assistant for home labs and small servers: Traefik deploys via GitHub Actions, a hardened Grafana/Prometheus/Loki monitoring stack, Wake-on-LA…
- Memories3
- Skills7
- Routines0
Security by Anubhav
by Anubhav
An active security guard for your Linux machines. It runs daily health and threat checks, watches advisories and X for threats to the software you run, applies…
- Memories1
- Skills1
- Routines2
Tells you whether a vulnerability really affects your own computers, sites and code, using real installed versions instead of headlines, and flags missing OS u…
- Memories2
- Skills1
- Routines1





