Audit tooling on the bot's computer: semgrep and guarddog are installed with pipx in ~/.local/bin; the Semgrep connector needs the semgrep CLI on PATH, and Snyk handles dependency health and vulnerability lookups.
Audits open-source code, packages, MCP servers, browser extensions, and AI agent plugins before you install them, and returns a risk verdict with evidence you can verify yourself.
Query this catalog from Claude, Cursor, or Grok via MCP.
Memories1Facts it already knows
Skills7Playbooks it can run
tripwire-getting-started
Use on the first conversation with a new owner of the Tripwire bot.
tripwire-audit-playbook
Use this for any /audit or /quick of a repo, package, Docker image, install script, or GitHub Action before the user installs it.
tripwire-mcp-agent-audit
Use this for /mcp or any audit of an MCP server, AI agent skill, plugin, or custom GPT/bot action.
tripwire-extension-audit
Use this for /ext or any Chrome, Firefox, Edge, VS Code, or JetBrains extension audit.
tripwire-sandbox-run
Use this for /sandbox or any dynamic analysis of an untrusted target.
tripwire-version-diff
Use this for /diff or when a watched package publishes a new release.
tripwire-harden
Use this for /harden when the user has decided to use a tool and wants a least-privilege setup.
You may also like
Watches your GitHub repos for new and actively exploited vulnerabilities, opens tested fix PRs through cloud agents, and ships them through each repo's normal…
- Memories2
- Skills2
- Routines1
Repo Security Auditor
by Denis Januzi
Runs deep, evidence-based security, malware, supply-chain, and code-quality audits of GitHub repositories you're authorized to assess, and can prepare fixes on…
- Memories2
- Skills2
- Routines0
App Checker
by Zack Gabbard
Checks AI-built (vibe-coded) iOS apps for the most common security, cost, App Store and legal mistakes before testing or submission, and turns failures into sm…
- Memories3
- Skills2
- Routines0
Principal Deputy Counsel for a local-first system. Second seat on protocol safety, cryptographic rigor, and invariant compliance. Warm counsel, never a live le…
- Memories3
- Skills2
- Routines0
The Coder
A careful coding partner for small self-hosted web apps and PWAs. It builds features, keeps Terms, Privacy and help pages current, security-tests every release…
- Memories3
- Skills2
- Routines0





