2 links tagged with all of: vulnerability scanning + security
Click any tag below to further narrow down your results
Links
Codex Security Cloud now includes Daybreak Blue, an AI model that automatically scans GitHub repositories, reviews new commits, finds and deduplicates security issues, and generates fixes — all without requiring your laptop to be on. It's available as a plugin for both desktop and web versions.
- Scans entire repos and continuously monitors new commits for vulnerabilities
- Automatically investigates findings, removes duplicates, and prepares fixes for human review
- Runs in the background even when your machine is offline
SkillSpector scans AI agent skills for vulnerabilities, malicious patterns, and CVEs before installation. It combines fast static checks with optional LLM analysis, covers 64 patterns across 16 categories, and outputs risk scores and detailed reports.
- SkillSpector scans AI agent skills before installation, checking 64 vulnerability patterns across 16 categories (prompt injection, data exfiltration, privilege escalation, etc.) plus real-time CVE lookups via OSV.dev.
- It runs a fast static scan by default, with an optional deeper LLM-based semantic check using providers like OpenAI, Anthropic, or NVIDIA's build.nvidia.com.
- Scans output a 0-100 risk score with severity labels and suggested fixes, in formats including JSON, Markdown, or SARIF for CI/CD pipelines.
- Even without LLM analysis (--no-llm flag), it still catches known code patterns and CVEs.