Detect drift. Defend cloud.
Agent skills for OpenClaw and MCP clients: pay and charge in USDC via x402, Agent Passport identity, context compression, and the Liquefy vault flight recorder.
AI-powered multi-chain Web3 security toolkit. Scan smart contracts across 6 EVM chains in minutes, not weeks.
Interactive React/Vite portfolio for Tasfiya Tabassum — useful experiments, security tooling, systems work, and the modern web.
Browser-based UI for editing, validating, and managing Sysmon XML configs — Flask + vanilla JS, multi-schema support.
Security Notes/Tools/Scripts
Native DeepSeek Harness workbench for evidence-first vulnerability research, reproduction, and reporting.
Web interface for the Bumblebee supply-chain scanner. Runs locally with Docker Compose, inventories the dependencies under a directory you mount, and reports matches against pinned upstream exposure catalogues. Unofficial project, not affiliated with Perplexity.
Client-side AWS IAM policy blast-radius analyzer (fail-closed). Web tool live; headless CLI + SARIF + GitHub Action in progress.
Supply-chain smoke detector: scan npm/PyPI/crates, detect typosquatting & malicious scripts, verify Sigstore provenance, anchor trust on Ethereum.
Static analysis for AI agent codebases: agentic vulnerability patterns + quantum-readiness/PKI gaps, in one scan.
Local-first context-integrity engine. Reconstructs trust from immutable runtime history, contains risky actions in QTF, and gates promotion through EXT.
Deterministic, local-first context builder for flow automation exports: redacts sensitive data, detects risks, and produces auditable bundles for AI assistants and support workflows: flow analysis, subflow expansion, secret redaction, token budgeting, and reproducible bundle generation via CLI and VUE web app.
Automated reconnaissance and attack-surface analysis pipeline for infrastructure visibility, asset discovery, and vulnerability identification.
A research instrument working toward one map of detection knowledge — the major rule libraries, where they intersect and where they don't, resolved against MITRE ATT&CK.
Offline Ed25519 verifier for Aiyo execution receipts. Published as @aiyoplane/verify on npm. Companion to aiyoplane/verify-python.
A comprehensive collection of regex patterns and verification functions for detecting and validating PII and sensitive data across multiple global regions and languages.
High‑performance iocx plugin for detecting Windows Registry keys, values, and persistence locations. Includes full test coverage, performance benchmarks, and security checks.
Evidence-first engineering discipline for Claude Code. Guards that ship with their calibration, a knowledge base that lints itself, and a plan gate that refuses unproven premises.
Deterministic Python CLI for repository hygiene checks and pre-commit secret scanning.
To associate your repository with the security-tooling topic, visit your repo's landing page and select "manage topics."