Ten free Claude Code security repos, including jev-guard
A list of ten open-source Claude Code security repos, one of which uses Jev to score each agent tool call as deny, ask, or allow.
Anthropic just shipped Claude Security, but only for Enterprise. these 10 free repos get you most of the way there tonight the idea is simple and overdue: one deep scan of each repository, then a fresh check on every change, so a bad commit gets caught the day it lands, not the day it gets exploited the open-source crowd didn't wait. these shipped in the last few weeks and run on the Claude Code you already pay for. 5 guard your code, 5 guard you from your own agent: 01 airsec → run a multi-pass security audit with the agent already on your machine. no new API key, no cloud upload, a report you can act on http://github.com/bas3line/Airsec 02 paranoid → type /hack-me and Claude attacks your own running app, proves each bug with a real request, patches it and checks the exploit stops working http://github.com/kulchankas/paranoid 03 security-harness → map a codebase, hunt vulnerabilities class by class, chain findings into escalations and export the report as SARIF, JSON or PDF http://github.com/dmdhrumilmistry/security-harness 04 claude-security-scan → ask for a security check and get a read-only sweep of your Mac, every local repo, GitHub, Vercel, cloud accounts and Gmail http://github.com/chaenmasahiro0425/claude-security-scan 05 prod-readiness → audit the whole repo through 8 lenses, from security to DevOps, and get one verdict: SHIP, FIX THEN SHIP or HOLD http://github.com/Taimoorkhan1122/prod-readiness 06 jev-guard → score every tool call your agent makes as deny, ask or allow, and flag prompt injection hiding in what it reads http://github.com/leepokai/jev-guard 07 CC-Monitor → log every file Claude Code touches, every command it runs and every network call, and block the risky ones before they happen http://github.com/cn0xroot/CC-Monitor 08 agents-sandbox → run each project's agent inside its own microVM, so it only sees the folders and secrets you hand it http://github.com/inoio/agents-sandbox 09 shim → see exactly what Claude Code sends to the model and what each turn costs, and mask secrets and personal data before they leave http://github.com/GetSHIM/shim-cli 10 AuditSentry → audit Solidity and Vyper contracts with Claude Code, get a working exploit for each finding and test it on a mainnet fork http://github.com/iktok90-design/ai-smart-contract-auditor start with the risk you've been putting off: > you ship fast and never pentest → paranoid > old commits might still hold your keys → claude-security-scan > your agent runs commands you never read → CC-Monitor Claude Security is live for Enterprise. these work for everyone tonight
This post quotes another post: x.com/claudeai/status/2112962248218148878