scan-sec

What problem does it solve?

It helps you detect security vulnerabilities in a repository before you ship by turning a “scan the code” request into a structured, evidence-based report with clear severities.

Core Features & Use Cases

• Guided security auditing: Checks code for the 21 governed vulnerability categories using reasoning that traces data flow (L1–L4) instead of naive pattern matching.
• Small vs Large scan modes: Handles small repos inline and large repos via sequential chunking for portability with equivalent output.
• Bilingual outputs (vi/en): Produces reports in Vietnamese or English depending on your requested language.
• Optional blast-radius analysis: When enabled, it can add call-tree context to prioritize what to fix first.

Quick Start

Ask the agent to scan security for your repo and generate a report in the language you prefer.