10 个免费 Claude Code 安全仓库，含 jev-guard

Mika @mika_systems原推发布于 2026.10.22

在 X 上打开原推

Anthropic just shipped Claude Security, but only for Enterprise. these 10 free repos get you most of the way there tonight the idea is simple and overdue: one deep scan of each repository, then a fresh check on every change, so a bad commit gets caught the day it lands, not the day it gets exploited the open-source crowd didn't wait. these shipped in the last few weeks and run on the Claude Code you already pay for. 5 guard your code, 5 guard you from your own agent: 01 airsec → run a multi-pass security audit with the agent already on your machine. no new API key, no cloud upload, a report you can act on http://github.com/bas3line/Airsec 02 paranoid → type /hack-me and Claude attacks your own running app, proves each bug with a real request, patches it and checks the exploit stops working http://github.com/kulchankas/paranoid 03 security-harness → map a codebase, hunt vulnerabilities class by class, chain findings into escalations and export the report as SARIF, JSON or PDF http://github.com/dmdhrumilmistry/security-harness 04 claude-security-scan → ask for a security check and get a read-only sweep of your Mac, every local repo, GitHub, Vercel, cloud accounts and Gmail http://github.com/chaenmasahiro0425/claude-security-scan 05 prod-readiness → audit the whole repo through 8 lenses, from security to DevOps, and get one verdict: SHIP, FIX THEN SHIP or HOLD http://github.com/Taimoorkhan1122/prod-readiness 06 jev-guard → score every tool call your agent makes as deny, ask or allow, and flag prompt injection hiding in what it reads http://github.com/leepokai/jev-guard 07 CC-Monitor → log every file Claude Code touches, every command it runs and every network call, and block the risky ones before they happen http://github.com/cn0xroot/CC-Monitor 08 agents-sandbox → run each project's agent inside its own microVM, so it only sees the folders and secrets you hand it http://github.com/inoio/agents-sandbox 09 shim → see exactly what Claude Code sends to the model and what each turn costs, and mask secrets and personal data before they leave http://github.com/GetSHIM/shim-cli 10 AuditSentry → audit Solidity and Vyper contracts with Claude Code, get a working exploit for each finding and test it on a mainnet fork http://github.com/iktok90-design/ai-smart-contract-auditor start with the risk you've been putting off: > you ship fast and never pentest → paranoid > old commits might still hold your keys → claude-security-scan > your agent runs commands you never read → CC-Monitor Claude Security is live for Enterprise. these work for everyone tonight

这条是引用着另一条写的：x.com/claudeai/status/2112962248218148878