buzzshield

What problem does it solve?

BuzzShield helps you prevent accidental leaks and dangerous wallet/agent configuration mistakes by scanning your crypto agent codebase for high-risk patterns before deployment.

Core Features & Use Cases

• Crypto-native secret detection: Finds exposed private keys, API keys, auth tokens, mnemonics, and other credential leaks across common files like CLAUDE.md and .env.
• Wallet safety checks: Flags risky transaction patterns (e.g., missing approval gates, unbounded transfers, missing limits, and drain-like flows) to reduce on-chain operational risk.
• Agent config security review: Identifies unsafe agent flags, overly broad tool access, missing trust gates, misconfigured cron/handlers, and governance/feature-flag problems.
• Contract security heuristics: Detects common smart-contract risk signals such as reentrancy guards, unchecked external calls, and ownership/deployer misuse.
• Actionable reports: Produces graded scan reports and can optionally fix safe issues or generate CI/CD-friendly output.

Quick Start

Run buzzshield with a command like "/security-scan --report markdown" to generate an HSaaS-style security report with remediation steps.