YuanCe (元测) — a disciplined, authorization-first AI security-testing methodology: a four-stage (recon → discovery → verification → reporting) web security testing workflow on authorized targets (self-owned assets / SRC bug bounty / CTF / local labs), with

Meta-schema for the Static Application Security Testing (SAST) of JSON Schemas

Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking

> exports the rockyou passwords as a set for security testing

⚠️ This package is for security testing and demos only.

High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis

Red-team adversarial security testing for ArtemisKit LLM evaluation toolkit

Sentinel automated security testing framework

Internal security testing package. Authorized use only.

EvalGuard core — LLM evaluation, security testing, firewall, gateway, and monitoring engine. Runtime dep of @evalguard/sdk and @evalguard/cli.

Adversarial security testing for AI agent handoffs

Simulated malicious package for security testing

security testing probe, abfe

API Security Testing Plugin for OpenCode - Automated vulnerability scanning and penetration testing

Claude Code MCP tool for autonomous security testing (Agentic Hacking)

Security Testing for react-native component

Allwright — the AI teammate that runs on YOUR machine. Polls your Jira, runs jailed agents in your local checkouts, opens PRs, executes approved deploys, and audits security/testing/architecture. Credentials and code never leave your host.

Authentication identifier canonicalization security testing for Unicode identity pipelines

A vulnerable library, to be used for security testing.

Nation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.