CodeInspectus

CodeInspectus is a security scanner designed for developers building applications with AI coding tools. It runs entirely on your machine, checking for exposed API keys, open databases, risky code patterns, and AI-specific vulnerabilities without uploading anything to the cloud. The tool integrates with AI coding assistants like Claude Code and Cursor, or works via terminal and CI pipelines, providing plain-language explanations of each issue found and asking for confirmation before making any changes.

The scanner detects six categories of repository risk: exposed secrets, open databases, AI-specific prompt injection traps, outdated packages with known vulnerabilities, concealed Unicode characters, and other common mistakes in AI-built applications. It operates as both a CLI tool and an MCP server, maintaining full privacy through local-only scanning with zero network egress during analysis.