security-sweep

What problem does it solve?

It identifies security weaknesses across your codebase and infrastructure before attackers can exploit them, producing evidence-backed findings with remediation guidance.

Core Features & Use Cases

• Auto-detects project type and mode: scans app, infrastructure, or hybrid by looking at your repository structure.
• Produces exploit-ready results: assigns confidence scores, detects attack chains, and requires exploit PoCs for HIGH+ severity.
• Validates real posture and blast radius: for infrastructure changes, it verifies live SSH state and assesses what breaks if exploited.
• Tracks and improves over time: saves results for baseline diffing and supports regression-tested auto-fixes for CRITICAL/HIGH issues.

Quick Start

Run the full audit by telling your AI to execute /security-sweep for a pentest-grade security review of your repository.