Data / Repositories / Security scanner
Security scanner repositories on GitHub: 9 ranked by stars
9 public repositories tagged Security scanner are on GitHub, with 24,186 stars between them; 7 had a push in the last 30 days. Most are written in Python (3), Rust (2), Go (1). The most starred: NVIDIA/SkillSpector (20,177), fkie-cad/cwe_checker (1,360), mongodb/kingfisher (1,260).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| NVIDIA/SkillSpector | Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code… | Python | 20,177 | 1,776 | Apache-2.0 | Oct 14 | Oct 14 |
| fkie-cad/cwe_checker | cwe_checker finds vulnerable patterns in binary executables | Rust | 1,360 | 146 | LGPL-3.0 | Sep 28 | Oct 11 |
| mongodb/kingfisher | Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python. | Rust | 1,260 | 123 | Apache-2.0 | Oct 7 | Oct 11 |
| hashgraph-online/hol-guard | Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. | Python | 892 | 158 | Apache-2.0 | Oct 14 | Oct 14 |
| graygnatconsole/mcp-audit-tool | Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure… | Python | 306 | 5 | MIT | Sep 26 | Oct 15 |
| makalin/SecureMCP | SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)]( It proactively identifies… | Go | 140 | 19 | MIT | Jun 7, 2025 | Oct 14 |
| ashfordeOU/grasp | GRASP — Code architecture visualizer + 150-tool MCP server. Dependency graphs, security scanning, multimodal knowledge graph, ORM tracking, git change impact, graph schema v3.… | HTML | 28 | 3 | Sep 7 | Oct 14 | |
| nsasoft/nsauditor-ai | NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.… | JavaScript | 20 | 6 | MIT | Oct 12 | Oct 14 |
| vasikmansuri/agentconfig-doctor | MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers in Claude Code, Cursor and VS Code… | TypeScript | 3 | 0 | MIT | Oct 14 | Oct 14 |
By language
- Python 3
Related topics
- MCP 7
- AI security 6
- Claude Code 4
- Prompt injection 4
- Security 4
- Devsecops 4
- Cursor 4
- Agent security 3
- Security tools 3
- Supply chain security 3
- Static analysis 3
- MCP security 3
Read from GitHub by SpecStream between October 11, 2026 and October 15, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.