Security testing that runs inside the coding agent you already use. Source-available, not open source.

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero deps. No model API.

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.