Releases·Tool Release
Show HN: Rowan, an open-source SAST scanner for AI apps (code, models, MCP)
Show HN: Rowan, an open-source SAST scanner for AI apps (code, models, MCP)
1 engagement1 sourceSat, Oct 3, 2026, 05:29 AM
AI Overview
- Rowan is an open-source static application security testing (SAST) scanner targeting AI apps, covering code, models, and MCP, released on GitHub
- The Hacker News post linking to the GitHub repo drew 1 engagement as of 2026-10-03
Entities
Related
Releases·Tool Release
Dev releases Tripwire, a sandboxed scanner that audits AI skills and MCP servers for security issues
Show HN: Tripwire – sandboxed security scanner for AI skills and MCP servers
Show HN: Tripwire – sandboxed security scanner for AI skills and MCP servers
1 engagement1 sourcehackernewsWed, Sep 9, 2026, 02:05 PM
Products·launched
CodeInspectus: local MCP security scanner for AI-generated web apps
CodeInspectus is a free, local MCP-compatible security scanner that detects vulnerabilities in AI-generated web applications without sending source code to external services. It combines Opengrep, Gitleaks, and Trivy with JavaScript/TypeScript-specific checks for issues like exposed secrets, permissive Supabase policies, unsafe model-output handling, and prompt injection paths. It targets developers using AI coding assistants who need to audit generated code for security flaws.
CodeInspectus is a free, local MCP-compatible security scanner that detects vulnerabilities in AI-generated web applications without sending source code to external services. It combines Opengrep, Gitleaks, and Trivy with JavaScript/TypeScript-specific checks for issues like exposed secrets, permissive Supabase policies, unsafe model-output handling, and prompt injection paths. It targets developers using AI coding assistants who need to audit generated code for security flaws.
15 engagement2 sourcesredditFri, Jul 17, 2026, 01:49 PM
Products·launched
CodeInspectus: open-source security scanner for AI-generated code
CodeInspectus is a fully open-source, local security scanner that checks AI-generated code for vulnerabilities. It covers 32 checks (13 AI-specific + 19 SAST) and 200+ secret/API-key patterns, catching issues like hardcoded secrets in client-side code, exposed API keys, and insecure RLS policies. It helps developers secure projects built with LLM-generated code.
CodeInspectus is a fully open-source, local security scanner that checks AI-generated code for vulnerabilities. It covers 32 checks (13 AI-specific + 19 SAST) and 200+ secret/API-key patterns, catching issues like hardcoded secrets in client-side code, exposed API keys, and insecure RLS policies. It helps developers secure projects built with LLM-generated code.
1 engagement1 sourceredditSun, Jul 12, 2026, 03:22 PM
Releases·Tool Release
Ship Safe, an open source security scanner for coding agents
Ship Safe is an open source security scanner designed for coding agents, released on GitHub. It aims to help developers identify security issues in AI-generated code.
Ship Safe is an open source security scanner designed for coding agents, released on GitHub. It aims to help developers identify security issues in AI-generated code.
13 engagement1 sourcehackernewsThu, Aug 6, 2026, 04:02 AM
Products·launched
Bastionskill – scan an AI agent skill for malicious code
A security scanner that analyzes AI agent skills (packaged instructions/tools) for malicious code or hidden instructions before installation. It uses LLMs to inspect skill contents and flag threats. It targets developers and teams deploying agent skills who need to vet third-party packages.
A security scanner that analyzes AI agent skills (packaged instructions/tools) for malicious code or hidden instructions before installation. It uses LLMs to inspect skill contents and flag threats. It targets developers and teams deploying agent skills who need to vet third-party packages.
1 engagement1 sourcehackernewsFri, Sep 18, 2026, 12:53 PM