Individual skill

deepsec

Run deepsec, an AI-powered cyber-security vulnerability scanner. Activates when the user invokes /deepsec, asks to run deepsec, or wants to scan their repo, branch, or uncommitted changes for vulnerabilities.

SKILL.md

Read pinned source

Source commit 36ea9fcb62a0a025a5ee020487ba72c92fb205e6

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: Yes
Repository scan complete: No
Skill scan complete: No
Observed behavior: Network or broad shell
Last checked: Nov 7, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 8,370
Repository last updated: Nov 6, 2026
License: Apache-2.0

Observed agent integration: claude-code, codex

security Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

.agents/skills/technical-writer/SKILL.mddoc · 15,718 bytes
.agents/skills/technical-writer/references/content-patterns.mddoc · 5,501 bytes
.agents/skills/technical-writer/references/editorial-standards.mddoc · 8,424 bytes
.agents/skills/technical-writer/references/technical-verification.mddoc · 9,688 bytes
.deepsec/.gitignoreasset · 486 bytes
.deepsec/AGENTS.mddoc · 841 bytes
.deepsec/README.mddoc · 5,812 bytes
.deepsec/data/deepsec/INFO.mddoc · 6,480 bytes
.deepsec/data/deepsec/SETUP.mddoc · 2,274 bytes
.deepsec/data/deepsec/files/.env.local.jsonasset · 3,359 bytes
.deepsec/data/deepsec/files/.github/workflows/ci.yml.jsonasset · 5,975 bytes
.deepsec/data/deepsec/files/.github/workflows/deepsec.yml.jsonasset · 8,345 bytes
.deepsec/data/deepsec/files/.github/workflows/e2e-live-sandbox.yml.jsonasset · 2,401 bytes
.deepsec/data/deepsec/files/.github/workflows/release.yml.jsonasset · 6,395 bytes
.deepsec/data/deepsec/files/e2e/vitest.config.ts.jsonasset · 2,380 bytes
.deepsec/data/deepsec/files/packages/core/src/paths.ts.jsonasset · 6,696 bytes
.deepsec/data/deepsec/files/packages/core/src/plugin.ts.jsonasset · 2,550 bytes
.deepsec/data/deepsec/files/packages/core/src/run.ts.jsonasset · 10,372 bytes
.deepsec/data/deepsec/files/packages/core/src/schemas.ts.jsonasset · 2,255 bytes
.deepsec/data/deepsec/files/packages/core/src/types.ts.jsonasset · 2,508 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/cli.ts.jsonasset · 4,384 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/export.ts.jsonasset · 7,900 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/init-project.ts.jsonasset · 8,867 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/init.ts.jsonasset · 3,705 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/metrics.ts.jsonasset · 6,049 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/process.ts.jsonasset · 2,489 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/report.ts.jsonasset · 2,336 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/sandbox-all.ts.jsonasset · 6,519 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/sandbox-process.ts.jsonasset · 2,803 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/commands/scan.ts.jsonasset · 3,126 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/data-commit.ts.jsonasset · 13,215 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/file-sources.ts.jsonasset · 2,567 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/pr-comment.ts.jsonasset · 2,597 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/preflight.ts.jsonasset · 11,392 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/resolve-project-id.ts.jsonasset · 3,016 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/sandbox/download.ts.jsonasset · 17,536 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/sandbox/merge-records.ts.jsonasset · 9,332 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/sandbox/orchestrator.ts.jsonasset · 6,641 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/sandbox/request-proxy.mjs.jsonasset · 2,714 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/sandbox/setup.ts.jsonasset · 9,328 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/sandbox/state.ts.jsonasset · 5,732 bytes
.deepsec/data/deepsec/files/packages/deepsec/src/sandbox/upload.ts.jsonasset · 9,216 bytes
.deepsec/data/deepsec/files/packages/processor/src/agents/claude-agent-sdk.ts.jsonasset · 2,655 bytes
.deepsec/data/deepsec/files/packages/processor/src/agents/codex-sdk.ts.jsonasset · 41,224 bytes
.deepsec/data/deepsec/files/packages/processor/src/agents/shared.ts.jsonasset · 11,184 bytes
.deepsec/data/deepsec/files/packages/processor/src/enrich.ts.jsonasset · 7,570 bytes
.deepsec/data/deepsec/files/packages/processor/src/index.ts.jsonasset · 15,148 bytes
.deepsec/data/deepsec/files/packages/processor/src/prompt/core.ts.jsonasset · 5,132 bytes
.deepsec/data/deepsec/files/packages/processor/src/prompt/highlights.ts.jsonasset · 11,439 bytes
.deepsec/data/deepsec/files/packages/processor/src/prompt/slug-notes.ts.jsonasset · 10,548 bytes
.deepsec/data/deepsec/files/packages/processor/src/triage.ts.jsonasset · 2,297 bytes
.deepsec/data/deepsec/files/packages/scanner/src/detect-tech.ts.jsonasset · 2,544 bytes
.deepsec/data/deepsec/files/packages/scanner/src/index.ts.jsonasset · 8,064 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/agent-loop-no-cap.ts.jsonasset · 7,009 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/agent-tool-definition.ts.jsonasset · 14,358 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/agentic-untrusted-prompt-input.ts.jsonasset · 10,835 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/algorithm-confusion.ts.jsonasset · 8,150 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/all-route-handlers.ts.jsonasset · 2,876 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/all-server-actions.ts.jsonasset · 1,923 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/android-manifest-export.ts.jsonasset · 1,699 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/apex-rest-resource.ts.jsonasset · 2,330 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/auth-bypass.ts.jsonasset · 5,485 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/azure-function-handler.ts.jsonasset · 2,398 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/cache-key-poisoning.ts.jsonasset · 10,381 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/cache-key-scope.ts.jsonasset · 6,128 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/catch-all-route-auth.ts.jsonasset · 2,390 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/catchall-router.ts.jsonasset · 2,354 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/clj-ring-handler.ts.jsonasset · 2,322 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/connectrpc-handler-impl.ts.jsonasset · 2,427 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/cors-wildcard.ts.jsonasset · 6,035 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/cr-kemal-route.ts.jsonasset · 2,287 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/cron-secret-check.ts.jsonasset · 4,510 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/cross-tenant-id.ts.jsonasset · 5,820 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/crypto-usage.ts.jsonasset · 6,774 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dangerous-html.ts.jsonasset · 14,360 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dart-shelf-handler.ts.jsonasset · 5,035 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/debug-endpoint.ts.jsonasset · 6,937 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dev-auth-bypass.ts.jsonasset · 12,658 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dockerfile-curl-pipe-unverified.ts.jsonasset · 2,421 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dockerfile-from-mutable-tag.ts.jsonasset · 2,332 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dockerfile-run-as-root.ts.jsonasset · 2,409 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dotnet-aspnet-controller.ts.jsonasset · 2,361 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dotnet-azure-function.ts.jsonasset · 2,365 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dotnet-minimal-api.ts.jsonasset · 2,338 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dotnet-razor-pages.ts.jsonasset · 2,365 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/dotnet-sql-raw.ts.jsonasset · 7,236 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/drizzle-mass-assignment.ts.jsonasset · 3,817 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/drizzle-raw-sql.ts.jsonasset · 6,446 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/env-exposure.ts.jsonasset · 11,276 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/env-var-as-bool.ts.jsonasset · 7,645 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/erl-cowboy-handler.ts.jsonasset · 834 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/error-message-leak.ts.jsonasset · 1,831 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/event-handler-mismatch.ts.jsonasset · 4,771 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/ex-phoenix-controller.ts.jsonasset · 2,759 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/expensive-api-abuse.ts.jsonasset · 16,756 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/framework-edge-sandbox.ts.jsonasset · 1,890 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/framework-image-optimizer.ts.jsonasset · 2,830 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/framework-internal-header.ts.jsonasset · 3,723 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/framework-server-action.ts.jsonasset · 3,887 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/framework-untrusted-fetch.ts.jsonasset · 2,950 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/fs-write-symlink-boundary.ts.jsonasset · 5,001 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/gcp-cloud-function.ts.jsonasset · 879 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/git-provider-url-injection.ts.jsonasset · 5,347 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/github-workflow-security.ts.jsonasset · 1,857 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-buffalo-route.ts.jsonasset · 1,614 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-chi-route.ts.jsonasset · 1,595 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-cobra-command.ts.jsonasset · 2,332 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-command-injection.ts.jsonasset · 2,368 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-echo-route.ts.jsonasset · 2,298 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-embed-asset.ts.jsonasset · 2,355 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-fiber-route.ts.jsonasset · 2,292 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-gin-route.ts.jsonasset · 2,303 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-gorilla-route.ts.jsonasset · 2,302 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-http-handler.ts.jsonasset · 3,146 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-sql-raw.ts.jsonasset · 5,947 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/go-ssrf.ts.jsonasset · 4,947 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/iam-permissions.ts.jsonasset · 2,373 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/index.ts.jsonasset · 6,073 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/insecure-crypto.ts.jsonasset · 7,698 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/ios-url-scheme.ts.jsonasset · 2,350 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-astro-endpoint.ts.jsonasset · 3,804 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-bullmq-processor.ts.jsonasset · 2,327 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-bun-serve.ts.jsonasset · 2,312 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-deno-route.ts.jsonasset · 2,708 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-express-route.ts.jsonasset · 2,661 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-fastify-route.ts.jsonasset · 2,793 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-graphql-resolver.ts.jsonasset · 2,331 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-hapi-route.ts.jsonasset · 2,309 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-hono-route.ts.jsonasset · 2,665 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-koa-route.ts.jsonasset · 2,636 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nestjs-controller.ts.jsonasset · 3,206 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-catch-all-route-auth.ts.jsonasset · 2,344 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-catchall-router.ts.jsonasset · 5,984 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-edge-sandbox.ts.jsonasset · 3,404 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-fw-server-action.ts.jsonasset · 2,380 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-image-optimizer.ts.jsonasset · 2,405 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-internal-header.ts.jsonasset · 2,785 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-middleware-only-auth.ts.jsonasset · 2,759 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-middleware.ts.jsonasset · 6,913 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-page-data-fetch.ts.jsonasset · 4,921 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-page-without-auth-fetch.ts.jsonasset · 2,343 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-route-handlers.ts.jsonasset · 7,489 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-server-action-no-auth.ts.jsonasset · 3,487 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-server-action.ts.jsonasset · 2,318 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-server-actions.ts.jsonasset · 2,405 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-untrusted-fetch.ts.jsonasset · 4,571 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nextjs-use-server-export.ts.jsonasset · 2,352 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nosql-injection.ts.jsonasset · 6,556 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-nuxt-route.ts.jsonasset · 2,354 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-react-unsafe-json-in-html.ts.jsonasset · 10,028 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-remix-route.ts.jsonasset · 2,861 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-socketio-handler.ts.jsonasset · 2,732 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-solidstart-action.ts.jsonasset · 2,357 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-sql-raw.ts.jsonasset · 14,563 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-sveltekit-route.ts.jsonasset · 4,306 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/js-workers-fetch.ts.jsonasset · 2,348 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/jvm-jaxrs-resource.ts.jsonasset · 2,328 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/jvm-ktor-route.ts.jsonasset · 2,289 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/jvm-micronaut-controller.ts.jsonasset · 2,342 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/jvm-spring-controller.ts.jsonasset · 2,340 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/jvm-sql-raw.ts.jsonasset · 9,742 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/jwt-handling.ts.jsonasset · 10,394 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/k8s-secret-reference.ts.jsonasset · 2,398 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/k8s-secrets-init-container.ts.jsonasset · 2,391 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/lambda-aws-handler.ts.jsonasset · 3,526 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/lua-crypto-weakness.ts.jsonasset · 3,620 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/lua-ngx-exec.ts.jsonasset · 2,690 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/lua-regex-bypass.ts.jsonasset · 4,202 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/lua-shared-dict-poisoning.ts.jsonasset · 3,535 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/lua-string-concat-url.ts.jsonasset · 3,205 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/mcp-tool-handler.ts.jsonasset · 3,526 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/missing-auth.ts.jsonasset · 3,372 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/missing-await.ts.jsonasset · 9,013 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/nextjs-middleware-only-auth.ts.jsonasset · 2,825 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/nextjs-middleware.ts.jsonasset · 3,233 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/non-atomic-operation.ts.jsonasset · 4,533 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/non-atomic-read-delete.ts.jsonasset · 7,531 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/oauth-flow.ts.jsonasset · 2,173 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/object-injection.ts.jsonasset · 4,753 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/open-redirect.ts.jsonasset · 8,197 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/page-data-fetch.ts.jsonasset · 3,551 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/page-without-auth-fetch.ts.jsonasset · 3,538 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/path-traversal.ts.jsonasset · 4,667 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-cakephp-controller.ts.jsonasset · 3,541 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-codeigniter-controller.ts.jsonasset · 1,748 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-drupal-controller.ts.jsonasset · 1,668 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-laravel-route.ts.jsonasset · 2,837 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-magento-controller.ts.jsonasset · 1,702 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-slim-route.ts.jsonasset · 2,730 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-sql-raw.ts.jsonasset · 5,295 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-symfony-controller.ts.jsonasset · 1,733 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-wordpress-rest.ts.jsonasset · 2,337 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/php-yii-controller.ts.jsonasset · 2,357 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/postmessage-origin.ts.jsonasset · 5,226 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/prisma-raw-sql.ts.jsonasset · 4,800 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/process-env-access.ts.jsonasset · 4,755 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/prompt-leaks-system-prompt.ts.jsonasset · 8,856 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/proto-rpc-surface.ts.jsonasset · 2,343 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/public-endpoint.ts.jsonasset · 2,349 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-aiohttp-route.ts.jsonasset · 2,657 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-airflow-dag.ts.jsonasset · 2,354 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-bottle-route.ts.jsonasset · 2,303 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-celery-task.ts.jsonasset · 2,349 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-django-view.ts.jsonasset · 2,368 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-falcon-resource.ts.jsonasset · 2,333 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-fastapi-route.ts.jsonasset · 3,806 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-flask-route.ts.jsonasset · 4,489 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-nosql-injection.ts.jsonasset · 3,305 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-sanic-route.ts.jsonasset · 4,083 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-sql-raw.ts.jsonasset · 5,657 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-starlette-route.ts.jsonasset · 2,791 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/py-tornado-handler.ts.jsonasset · 2,331 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rate-limit-bypass.ts.jsonasset · 6,243 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rb-grape-endpoint.ts.jsonasset · 2,294 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rb-hanami-action.ts.jsonasset · 2,323 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rb-rails-controller.ts.jsonasset · 2,724 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rb-roda-route.ts.jsonasset · 2,266 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rb-sinatra-route.ts.jsonasset · 2,282 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rb-sql-raw.ts.jsonasset · 4,178 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rce.ts.jsonasset · 6,389 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/response-header-leak.ts.jsonasset · 6,555 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-actix-route.ts.jsonasset · 2,306 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-axum-route.ts.jsonasset · 3,957 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-lambda-runtime.ts.jsonasset · 2,314 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-poem-route.ts.jsonasset · 2,276 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-rocket-route.ts.jsonasset · 2,305 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-sql-raw.ts.jsonasset · 6,050 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-tide-route.ts.jsonasset · 2,613 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-tonic-grpc.ts.jsonasset · 2,293 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/rs-warp-filter.ts.jsonasset · 2,315 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/sandbox-runtime-script.ts.jsonasset · 2,792 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/secret-env-var.ts.jsonasset · 7,191 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/secret-in-fallback.ts.jsonasset · 8,395 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/secret-in-log.ts.jsonasset · 7,637 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/secrets-exposure.ts.jsonasset · 6,392 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/secrets-plaintext-exposure.ts.jsonasset · 4,634 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/security-behind-flag.ts.jsonasset · 6,032 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/sensitive-data-in-traces.ts.jsonasset · 6,209 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/server-action-no-auth.ts.jsonasset · 2,399 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/server-action.ts.jsonasset · 2,721 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/service-entry-point.ts.jsonasset · 2,380 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/session-cookie-config.ts.jsonasset · 12,089 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/slack-signing-verification.ts.jsonasset · 7,787 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/snowflake-bigquery-sql.ts.jsonasset · 5,226 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/soql-injection.ts.jsonasset · 5,442 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/spread-operator-injection.ts.jsonasset · 4,854 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/sql-injection.ts.jsonasset · 15,846 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/ssrf.ts.jsonasset · 5,110 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/streaming-endpoint.ts.jsonasset · 3,153 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/swift-vapor-route.ts.jsonasset · 4,868 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/test-header-bypass.ts.jsonasset · 15,016 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/tf-encryption-missing.ts.jsonasset · 2,413 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/tf-iac-surface.ts.jsonasset · 2,447 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/tf-iam-wildcard.ts.jsonasset · 2,379 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/tf-module-unpinned.ts.jsonasset · 6,187 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/tf-public-ingress.ts.jsonasset · 2,319 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/tf-secret-in-data.ts.jsonasset · 3,692 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/trpc-public-procedure.ts.jsonasset · 2,984 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/unix-socket-listener.ts.jsonasset · 2,367 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/unsafe-deserialization.ts.jsonasset · 5,523 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/unsafe-json-in-html.ts.jsonasset · 10,771 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/unsafe-redirect.ts.jsonasset · 9,373 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/untrusted-redirect-following.ts.jsonasset · 11,429 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/unverified-lookup.ts.jsonasset · 5,877 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/url-regex-validation.ts.jsonasset · 7,044 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/use-server-export.ts.jsonasset · 2,381 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/webhook-handler.ts.jsonasset · 3,319 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/xss.ts.jsonasset · 7,899 bytes
.deepsec/data/deepsec/files/packages/scanner/src/matchers/zod-passthrough-mass-assignment.ts.jsonasset · 9,411 bytes
.deepsec/data/deepsec/files/samples/webapp/matchers/webapp-debug-flag.ts.jsonasset · 2,804 bytes
.deepsec/data/deepsec/files/samples/webapp/matchers/webapp-route-no-rate-limit.ts.jsonasset · 2,494 bytes
.deepsec/data/deepsec/tech.jsonasset · 204 bytes
.deepsec/deepsec.config.tsruns · 425 bytes
.deepsec/matchers/archive-extraction-untrusted.tsruns · 3,636 bytes
.deepsec/package.jsonruns · 305 bytes
.deepsec/pnpm-lock.yamlasset · 197 bytes
.deepsec/pnpm-workspace.yamlasset · 297 bytes
.deepsec/tsconfig.jsonasset · 341 bytes
.env.exampleasset · 571 bytes
.github/ISSUE_TEMPLATE/bug.mddoc · 718 bytes
.github/ISSUE_TEMPLATE/feature.mddoc · 489 bytes
.github/ISSUE_TEMPLATE/matcher-suggestion.mddoc · 989 bytes
.github/PULL_REQUEST_TEMPLATE.mddoc · 558 bytes
.github/workflows/bump-version.ymlasset · 9,970 bytes
.github/workflows/ci.ymlasset · 1,745 bytes
.github/workflows/deepsec.ymlasset · 4,007 bytes
.github/workflows/e2e-live-sandbox.ymlasset · 1,182 bytes
.github/workflows/release.ymlasset · 6,430 bytes
.gitignoreasset · 197 bytes
CLAUDE.mddoc · 1,856 bytes
CODE_OF_CONDUCT.mddoc · 466 bytes
CONTRIBUTING.mddoc · 5,629 bytes
LICENSEasset · 11,358 bytes
NOTICEasset · 134 bytes
README.mddoc · 7,882 bytes
SECURITY.mddoc · 322 bytes
SKILL.mdcore · 5,205 bytes
SKILL.mdcore · 5,205 bytes
biome.jsonasset · 1,445 bytes
docs/architecture.mddoc · 8,624 bytes
docs/configuration.mddoc · 7,926 bytes
docs/data-layout.mddoc · 11,005 bytes
docs/faq.mddoc · 7,765 bytes
docs/getting-started.mddoc · 9,213 bytes
docs/meta.jsonasset · 234 bytes
docs/models.mddoc · 10,316 bytes
docs/plugins.mddoc · 7,764 bytes
docs/reviewing-changes.mddoc · 10,231 bytes
docs/supported-tech.mddoc · 8,307 bytes
docs/vercel-setup.mddoc · 8,157 bytes
docs/writing-matchers.mddoc · 6,658 bytes
e2e/bundle.test.tsruns · 30,957 bytes
e2e/pipeline-sandbox.test.tsruns · 17,905 bytes
e2e/pipeline.test.tsruns · 12,683 bytes
e2e/scan.test.tsruns · 6,012 bytes
e2e/vitest.config.tsruns · 1,048 bytes
fixtures/vulnerable-app/package.jsonruns · 72 bytes
fixtures/vulnerable-app/src/api/admin.tsruns · 519 bytes
fixtures/vulnerable-app/src/api/upload.tsruns · 517 bytes
fixtures/vulnerable-app/src/api/users.tsruns · 602 bytes
fixtures/vulnerable-app/src/components/comment.tsxruns · 616 bytes
fixtures/vulnerable-app/src/config.tsruns · 465 bytes
fixtures/vulnerable-app/src/lib/crypto.tsruns · 690 bytes
fixtures/vulnerable-app/src/lib/db.tsruns · 653 bytes
fixtures/vulnerable-app/src/lib/fetch-proxy.tsruns · 493 bytes
fixtures/vulnerable-app/src/utils/exec-helper.tsruns · 653 bytes
fixtures/vulnerable-app/src/utils/redirect.tsruns · 453 bytes
knip.jsonasset · 1,245 bytes
package.jsonruns · 1,753 bytes
packages/core/package.jsonruns · 229 bytes
packages/core/src/__tests__/finding-id.test.tsruns · 3,334 bytes
packages/core/src/__tests__/paths.test.tsruns · 2,188 bytes
packages/core/src/__tests__/run.test.tsruns · 7,787 bytes
packages/core/src/__tests__/schemas.test.tsruns · 5,226 bytes
packages/core/src/__tests__/severity.test.tsruns · 4,034 bytes
packages/core/src/__tests__/shutdown.test.tsruns · 6,472 bytes
packages/core/src/config.tsruns · 3,867 bytes
packages/core/src/finding-id.tsruns · 2,456 bytes
packages/core/src/index.tsruns · 203 bytes
packages/core/src/paths.tsruns · 3,824 bytes
packages/core/src/plugin.tsruns · 6,622 bytes
packages/core/src/run.tsruns · 16,284 bytes
packages/core/src/schemas.tsruns · 9,941 bytes
packages/core/src/types.tsruns · 10,760 bytes
packages/core/tsconfig.jsonasset · 137 bytes
packages/core/vitest.config.tsruns · 159 bytes
packages/processor/package.jsonruns · 484 bytes
packages/processor/src/__tests__/attribution.test.tsruns · 3,627 bytes
packages/processor/src/__tests__/batch.test.tsruns · 1,737 bytes
packages/processor/src/__tests__/codex-setup.test.tsruns · 618 bytes
packages/processor/src/__tests__/pi-sdk-tools.test.tsruns · 8,554 bytes
packages/processor/src/__tests__/process-revalidate.test.tsruns · 59,424 bytes
packages/processor/src/__tests__/prompt-assemble.test.tsruns · 3,585 bytes
packages/processor/src/__tests__/prompt-samples.fixtures.tsruns · 10,851 bytes
packages/processor/src/__tests__/prompt-samples.test.tsruns · 4,523 bytes
packages/processor/src/__tests__/reconcile.test.tsruns · 15,508 bytes
packages/processor/src/__tests__/registry.test.tsruns · 2,049 bytes
packages/processor/src/__tests__/shared.test.tsruns · 25,130 bytes
packages/processor/src/__tests__/stub-agent.tsruns · 3,027 bytes
packages/processor/src/agents/claude-agent-sdk.tsruns · 28,486 bytes
packages/processor/src/agents/codex-sdk.tsruns · 49,670 bytes
packages/processor/src/agents/codex-wrapper.shruns · 990 bytes
packages/processor/src/agents/pi-sdk.tsruns · 39,914 bytes
packages/processor/src/agents/registry.tsruns · 373 bytes
packages/processor/src/agents/shared.tsruns · 46,515 bytes
packages/processor/src/agents/types.tsruns · 4,906 bytes
packages/processor/src/batch.tsruns · 1,291 bytes
packages/processor/src/enrich.tsruns · 8,578 bytes
packages/processor/src/index.tsruns · 63,641 bytes
packages/processor/src/prompt/assemble.tsruns · 7,422 bytes
packages/processor/src/prompt/core.tsruns · 7,103 bytes
packages/processor/src/prompt/file-language.tsruns · 1,489 bytes
packages/processor/src/prompt/highlights.tsruns · 45,059 bytes
packages/processor/src/prompt/index.tsruns · 327 bytes
packages/processor/src/prompt/slug-notes.tsruns · 20,757 bytes
packages/processor/src/reconcile.tsruns · 10,739 bytes
packages/processor/src/setup-agent.tsruns · 869 bytes
packages/processor/src/triage.tsruns · 8,568 bytes
packages/processor/tsconfig.jsonasset · 137 bytes
packages/processor/vitest.config.tsruns · 164 bytes
packages/scanner/package.jsonruns · 319 bytes
packages/scanner/src/__tests__/declarative-matcher.test.tsruns · 5,315 bytes
packages/scanner/src/__tests__/detect-tech.test.tsruns · 6,962 bytes
packages/scanner/src/__tests__/framework-matchers.test.tsruns · 6,867 bytes
packages/scanner/src/__tests__/matcher-examples.test.tsruns · 5,787 bytes
packages/scanner/src/__tests__/matchers.test.tsruns · 4,956 bytes
packages/scanner/src/__tests__/scan-files.test.tsruns · 4,085 bytes
packages/scanner/src/__tests__/windows-paths.test.tsruns · 2,452 bytes
packages/scanner/src/declarative-matcher.tsruns · 9,898 bytes
packages/scanner/src/detect-tech.tsruns · 17,214 bytes
packages/scanner/src/index.tsruns · 25,492 bytes
packages/scanner/src/matcher-registry.tsruns · 649 bytes
packages/scanner/src/matchers/agent-loop-no-cap.tsruns · 3,244 bytes
packages/scanner/src/matchers/agent-tool-definition.tsruns · 3,171 bytes
packages/scanner/src/matchers/agentic-untrusted-prompt-input.tsruns · 4,214 bytes
packages/scanner/src/matchers/algorithm-confusion.tsruns · 1,842 bytes
packages/scanner/src/matchers/android-manifest-export.tsruns · 1,879 bytes
packages/scanner/src/matchers/apex-rest-resource.tsruns · 1,841 bytes
packages/scanner/src/matchers/auth-bypass.tsruns · 1,556 bytes
packages/scanner/src/matchers/azure-function-handler.tsruns · 1,865 bytes
packages/scanner/src/matchers/cache-key-poisoning.tsruns · 2,460 bytes
packages/scanner/src/matchers/cache-key-scope.tsruns · 3,133 bytes
packages/scanner/src/matchers/clj-ring-handler.tsruns · 1,659 bytes
packages/scanner/src/matchers/connectrpc-handler-impl.tsruns · 3,210 bytes
packages/scanner/src/matchers/cors-wildcard.tsruns · 1,791 bytes
packages/scanner/src/matchers/cr-kemal-route.tsruns · 1,594 bytes
packages/scanner/src/matchers/cron-secret-check.tsruns · 3,148 bytes
packages/scanner/src/matchers/cross-tenant-id.tsruns · 2,718 bytes
packages/scanner/src/matchers/crypto-usage.tsruns · 7,374 bytes
packages/scanner/src/matchers/dangerous-html.tsruns · 2,482 bytes
packages/scanner/src/matchers/dart-shelf-handler.tsruns · 1,751 bytes
packages/scanner/src/matchers/debug-endpoint.tsruns · 2,771 bytes
packages/scanner/src/matchers/dev-auth-bypass.tsruns · 3,402 bytes
packages/scanner/src/matchers/dockerfile-curl-pipe-unverified.tsruns · 2,569 bytes
packages/scanner/src/matchers/dockerfile-from-mutable-tag.tsruns · 1,968 bytes
packages/scanner/src/matchers/dockerfile-run-as-root.tsruns · 2,663 bytes
packages/scanner/src/matchers/dotnet-aspnet-controller.tsruns · 1,659 bytes
packages/scanner/src/matchers/dotnet-azure-function.tsruns · 1,634 bytes
packages/scanner/src/matchers/dotnet-minimal-api.tsruns · 1,539 bytes
packages/scanner/src/matchers/dotnet-razor-pages.tsruns · 1,564 bytes
packages/scanner/src/matchers/dotnet-sql-raw.tsruns · 3,487 bytes
packages/scanner/src/matchers/drizzle-mass-assignment.tsruns · 3,445 bytes
packages/scanner/src/matchers/drizzle-raw-sql.tsruns · 3,371 bytes
packages/scanner/src/matchers/env-exposure.tsruns · 2,957 bytes
packages/scanner/src/matchers/env-var-as-bool.tsruns · 1,753 bytes
packages/scanner/src/matchers/erl-cowboy-handler.tsruns · 1,314 bytes
packages/scanner/src/matchers/error-message-leak.tsruns · 2,712 bytes
packages/scanner/src/matchers/event-handler-mismatch.tsruns · 3,408 bytes
packages/scanner/src/matchers/ex-phoenix-controller.tsruns · 1,775 bytes
packages/scanner/src/matchers/expensive-api-abuse.tsruns · 6,706 bytes
packages/scanner/src/matchers/fs-write-symlink-boundary.tsruns · 4,296 bytes
packages/scanner/src/matchers/gcp-cloud-function.tsruns · 1,844 bytes
packages/scanner/src/matchers/git-provider-url-injection.tsruns · 1,525 bytes
packages/scanner/src/matchers/github-workflow-security.tsruns · 4,480 bytes
packages/scanner/src/matchers/go-buffalo-route.tsruns · 1,350 bytes
packages/scanner/src/matchers/go-chi-route.tsruns · 1,610 bytes
packages/scanner/src/matchers/go-cobra-command.tsruns · 1,576 bytes
packages/scanner/src/matchers/go-command-injection.tsruns · 965 bytes
packages/scanner/src/matchers/go-echo-route.tsruns · 1,464 bytes
packages/scanner/src/matchers/go-embed-asset.tsruns · 2,092 bytes
packages/scanner/src/matchers/go-fiber-route.tsruns · 1,478 bytes
packages/scanner/src/matchers/go-gin-route.tsruns · 1,586 bytes
packages/scanner/src/matchers/go-gorilla-route.tsruns · 1,430 bytes
packages/scanner/src/matchers/go-http-handler.tsruns · 1,594 bytes
packages/scanner/src/matchers/go-sql-raw.tsruns · 3,375 bytes
packages/scanner/src/matchers/go-ssrf.tsruns · 1,475 bytes
packages/scanner/src/matchers/iam-permissions.tsruns · 2,015 bytes
packages/scanner/src/matchers/index.tsruns · 23,985 bytes
packages/scanner/src/matchers/insecure-crypto.tsruns · 2,234 bytes
packages/scanner/src/matchers/ios-url-scheme.tsruns · 1,952 bytes
packages/scanner/src/matchers/js-astro-endpoint.tsruns · 1,582 bytes
packages/scanner/src/matchers/js-bullmq-processor.tsruns · 1,425 bytes
packages/scanner/src/matchers/js-bun-serve.tsruns · 1,279 bytes
packages/scanner/src/matchers/js-deno-route.tsruns · 1,499 bytes
packages/scanner/src/matchers/js-express-route.tsruns · 1,926 bytes
packages/scanner/src/matchers/js-fastify-route.tsruns · 1,580 bytes
packages/scanner/src/matchers/js-graphql-resolver.tsruns · 1,656 bytes
packages/scanner/src/matchers/js-hapi-route.tsruns · 1,286 bytes
packages/scanner/src/matchers/js-hono-route.tsruns · 1,352 bytes
packages/scanner/src/matchers/js-koa-route.tsruns · 1,558 bytes
packages/scanner/src/matchers/js-nestjs-controller.tsruns · 1,460 bytes
packages/scanner/src/matchers/js-nextjs-catch-all-route-auth.tsruns · 2,625 bytes
packages/scanner/src/matchers/js-nextjs-catchall-router.tsruns · 3,440 bytes
packages/scanner/src/matchers/js-nextjs-edge-sandbox.tsruns · 3,544 bytes
packages/scanner/src/matchers/js-nextjs-fw-server-action.tsruns · 3,536 bytes
packages/scanner/src/matchers/js-nextjs-image-optimizer.tsruns · 3,603 bytes
packages/scanner/src/matchers/js-nextjs-internal-header.tsruns · 3,266 bytes
packages/scanner/src/matchers/js-nextjs-middleware-only-auth.tsruns · 2,846 bytes
packages/scanner/src/matchers/js-nextjs-middleware.tsruns · 3,234 bytes
packages/scanner/src/matchers/js-nextjs-page-data-fetch.tsruns · 2,218 bytes
packages/scanner/src/matchers/js-nextjs-page-without-auth-fetch.tsruns · 2,452 bytes
packages/scanner/src/matchers/js-nextjs-route-handlers.tsruns · 2,758 bytes
packages/scanner/src/matchers/js-nextjs-server-action-no-auth.tsruns · 2,760 bytes
packages/scanner/src/matchers/js-nextjs-server-action.tsruns · 2,584 bytes
packages/scanner/src/matchers/js-nextjs-server-actions.tsruns · 2,934 bytes
packages/scanner/src/matchers/js-nextjs-untrusted-fetch.tsruns · 3,245 bytes
packages/scanner/src/matchers/js-nextjs-use-server-export.tsruns · 2,419 bytes
packages/scanner/src/matchers/js-nosql-injection.tsruns · 3,538 bytes
packages/scanner/src/matchers/js-nuxt-route.tsruns · 1,380 bytes
packages/scanner/src/matchers/js-react-unsafe-json-in-html.tsruns · 3,067 bytes
packages/scanner/src/matchers/js-remix-route.tsruns · 1,570 bytes
packages/scanner/src/matchers/js-socketio-handler.tsruns · 1,532 bytes
packages/scanner/src/matchers/js-solidstart-action.tsruns · 1,326 bytes
packages/scanner/src/matchers/js-sql-raw.tsruns · 6,704 bytes
packages/scanner/src/matchers/js-sveltekit-route.tsruns · 1,743 bytes
packages/scanner/src/matchers/js-workers-fetch.tsruns · 1,723 bytes
packages/scanner/src/matchers/jvm-jaxrs-resource.tsruns · 1,554 bytes
packages/scanner/src/matchers/jvm-ktor-route.tsruns · 1,356 bytes
packages/scanner/src/matchers/jvm-micronaut-controller.tsruns · 1,413 bytes
packages/scanner/src/matchers/jvm-spring-controller.tsruns · 1,443 bytes
packages/scanner/src/matchers/jvm-sql-raw.tsruns · 5,298 bytes
packages/scanner/src/matchers/jwt-handling.tsruns · 2,508 bytes
packages/scanner/src/matchers/k8s-secret-reference.tsruns · 3,913 bytes
packages/scanner/src/matchers/k8s-secrets-init-container.tsruns · 3,172 bytes
packages/scanner/src/matchers/lambda-aws-handler.tsruns · 2,025 bytes
packages/scanner/src/matchers/lua-crypto-weakness.tsruns · 1,423 bytes
packages/scanner/src/matchers/lua-ngx-exec.tsruns · 1,166 bytes
packages/scanner/src/matchers/lua-regex-bypass.tsruns · 1,902 bytes
packages/scanner/src/matchers/lua-shared-dict-poisoning.tsruns · 1,218 bytes
packages/scanner/src/matchers/lua-string-concat-url.tsruns · 1,291 bytes
packages/scanner/src/matchers/mcp-tool-handler.tsruns · 4,250 bytes
packages/scanner/src/matchers/missing-auth.tsruns · 3,253 bytes
packages/scanner/src/matchers/missing-await.tsruns · 2,611 bytes
packages/scanner/src/matchers/non-atomic-operation.tsruns · 2,524 bytes
packages/scanner/src/matchers/non-atomic-read-delete.tsruns · 3,495 bytes
packages/scanner/src/matchers/oauth-flow.tsruns · 2,183 bytes
packages/scanner/src/matchers/object-injection.tsruns · 1,635 bytes
packages/scanner/src/matchers/open-redirect.tsruns · 1,590 bytes
packages/scanner/src/matchers/path-traversal.tsruns · 2,037 bytes
packages/scanner/src/matchers/php-cakephp-controller.tsruns · 1,611 bytes
packages/scanner/src/matchers/php-codeigniter-controller.tsruns · 1,742 bytes
packages/scanner/src/matchers/php-drupal-controller.tsruns · 1,697 bytes
packages/scanner/src/matchers/php-laravel-route.tsruns · 2,771 bytes
packages/scanner/src/matchers/php-magento-controller.tsruns · 1,810 bytes
packages/scanner/src/matchers/php-slim-route.tsruns · 1,625 bytes
packages/scanner/src/matchers/php-sql-raw.tsruns · 3,928 bytes
packages/scanner/src/matchers/php-symfony-controller.tsruns · 1,728 bytes
packages/scanner/src/matchers/php-wordpress-rest.tsruns · 1,980 bytes
packages/scanner/src/matchers/php-yii-controller.tsruns · 1,829 bytes
packages/scanner/src/matchers/postmessage-origin.tsruns · 1,951 bytes
packages/scanner/src/matchers/prisma-raw-sql.tsruns · 3,098 bytes
packages/scanner/src/matchers/process-env-access.tsruns · 1,652 bytes
packages/scanner/src/matchers/prompt-leaks-system-prompt.tsruns · 4,215 bytes
packages/scanner/src/matchers/proto-rpc-surface.tsruns · 3,615 bytes
packages/scanner/src/matchers/public-endpoint.tsruns · 1,278 bytes
packages/scanner/src/matchers/py-aiohttp-route.tsruns · 1,457 bytes
packages/scanner/src/matchers/py-airflow-dag.tsruns · 1,697 bytes
packages/scanner/src/matchers/py-bottle-route.tsruns · 1,131 bytes
packages/scanner/src/matchers/py-celery-task.tsruns · 1,260 bytes
packages/scanner/src/matchers/py-django-view.tsruns · 1,876 bytes
packages/scanner/src/matchers/py-falcon-resource.tsruns · 1,424 bytes
packages/scanner/src/matchers/py-fastapi-route.tsruns · 1,425 bytes
packages/scanner/src/matchers/py-flask-route.tsruns · 1,351 bytes
packages/scanner/src/matchers/py-nosql-injection.tsruns · 2,706 bytes
packages/scanner/src/matchers/py-sanic-route.tsruns · 1,378 bytes
packages/scanner/src/matchers/py-sql-raw.tsruns · 4,427 bytes
packages/scanner/src/matchers/py-starlette-route.tsruns · 1,365 bytes
packages/scanner/src/matchers/py-tornado-handler.tsruns · 1,369 bytes
packages/scanner/src/matchers/rate-limit-bypass.tsruns · 2,974 bytes
packages/scanner/src/matchers/rb-grape-endpoint.tsruns · 1,184 bytes
packages/scanner/src/matchers/rb-hanami-action.tsruns · 1,185 bytes
packages/scanner/src/matchers/rb-rails-controller.tsruns · 1,810 bytes
packages/scanner/src/matchers/rb-roda-route.tsruns · 1,164 bytes
packages/scanner/src/matchers/rb-sinatra-route.tsruns · 1,183 bytes
packages/scanner/src/matchers/rb-sql-raw.tsruns · 3,038 bytes
packages/scanner/src/matchers/rce.tsruns · 1,517 bytes
packages/scanner/src/matchers/response-header-leak.tsruns · 1,687 bytes
packages/scanner/src/matchers/rs-actix-route.tsruns · 1,416 bytes
packages/scanner/src/matchers/rs-axum-route.tsruns · 1,711 bytes
packages/scanner/src/matchers/rs-lambda-runtime.tsruns · 1,282 bytes
packages/scanner/src/matchers/rs-poem-route.tsruns · 1,244 bytes
packages/scanner/src/matchers/rs-rocket-route.tsruns · 1,270 bytes
packages/scanner/src/matchers/rs-sql-raw.tsruns · 3,180 bytes
packages/scanner/src/matchers/rs-tide-route.tsruns · 1,164 bytes
packages/scanner/src/matchers/rs-tonic-grpc.tsruns · 1,425 bytes
packages/scanner/src/matchers/rs-warp-filter.tsruns · 1,221 bytes
packages/scanner/src/matchers/sandbox-runtime-script.tsruns · 4,625 bytes
packages/scanner/src/matchers/secret-env-var.tsruns · 2,130 bytes
packages/scanner/src/matchers/secret-in-fallback.tsruns · 1,769 bytes
packages/scanner/src/matchers/secret-in-log.tsruns · 2,491 bytes
packages/scanner/src/matchers/secrets-exposure.tsruns · 4,311 bytes
packages/scanner/src/matchers/secrets-plaintext-exposure.tsruns · 3,775 bytes
packages/scanner/src/matchers/security-behind-flag.tsruns · 2,650 bytes
packages/scanner/src/matchers/sensitive-data-in-traces.tsruns · 3,352 bytes
packages/scanner/src/matchers/service-entry-point.tsruns · 2,985 bytes
packages/scanner/src/matchers/session-cookie-config.tsruns · 3,969 bytes
packages/scanner/src/matchers/slack-signing-verification.tsruns · 4,614 bytes
packages/scanner/src/matchers/snowflake-bigquery-sql.tsruns · 3,956 bytes
packages/scanner/src/matchers/soql-injection.tsruns · 3,541 bytes
packages/scanner/src/matchers/spread-operator-injection.tsruns · 1,509 bytes
packages/scanner/src/matchers/sql-injection.tsruns · 2,922 bytes
packages/scanner/src/matchers/ssrf.tsruns · 4,235 bytes
packages/scanner/src/matchers/streaming-endpoint.tsruns · 3,188 bytes
packages/scanner/src/matchers/swift-vapor-route.tsruns · 1,809 bytes
packages/scanner/src/matchers/test-header-bypass.tsruns · 2,850 bytes
packages/scanner/src/matchers/tf-encryption-missing.tsruns · 4,173 bytes
packages/scanner/src/matchers/tf-iac-surface.tsruns · 4,917 bytes
packages/scanner/src/matchers/tf-iam-wildcard.tsruns · 2,961 bytes
packages/scanner/src/matchers/tf-module-unpinned.tsruns · 4,137 bytes
packages/scanner/src/matchers/tf-public-ingress.tsruns · 4,616 bytes
packages/scanner/src/matchers/tf-secret-in-data.tsruns · 3,261 bytes
packages/scanner/src/matchers/trpc-public-procedure.tsruns · 3,203 bytes
packages/scanner/src/matchers/unix-socket-listener.tsruns · 3,117 bytes
packages/scanner/src/matchers/unsafe-deserialization.tsruns · 1,684 bytes
packages/scanner/src/matchers/unsafe-redirect.tsruns · 2,825 bytes
packages/scanner/src/matchers/untrusted-redirect-following.tsruns · 3,991 bytes
packages/scanner/src/matchers/unverified-lookup.tsruns · 2,922 bytes
packages/scanner/src/matchers/url-regex-validation.tsruns · 2,478 bytes
packages/scanner/src/matchers/utils.tsruns · 1,042 bytes
packages/scanner/src/matchers/webhook-handler.tsruns · 2,371 bytes
packages/scanner/src/matchers/xss.tsruns · 1,507 bytes
packages/scanner/src/matchers/zod-passthrough-mass-assignment.tsruns · 2,906 bytes
packages/scanner/src/types.tsruns · 1,094 bytes
packages/scanner/tsconfig.jsonasset · 137 bytes
packages/scanner/vitest.config.tsruns · 162 bytes
packages/website/.gitignoreasset · 523 bytes
packages/website/README.mddoc · 1,450 bytes
packages/website/app/api/search/route.tsruns · 255 bytes
packages/website/app/docs/[...slug]/page.tsxruns · 2,231 bytes
packages/website/app/docs/layout.tsxruns · 587 bytes
packages/website/app/docs/page.tsxruns · 122 bytes
packages/website/app/favicon.icoasset · 25,931 bytes
packages/website/app/globals.cssasset · 605 bytes
packages/website/app/layout.tsxruns · 1,272 bytes
packages/website/app/page.tsxruns · 1,807 bytes
packages/website/app/rss.xml/route.tsruns · 1,129 bytes
packages/website/components/geistdocs/mdx-components.tsxruns · 224 bytes
packages/website/components/geistdocs/provider.tsxruns · 400 bytes
packages/website/components/run-command.tsxruns · 1,838 bytes
packages/website/eslint.config.mjsruns · 483 bytes
packages/website/lib/geistdocs/config.tsxruns · 1,881 bytes
packages/website/lib/geistdocs/fonts.tsruns · 338 bytes
packages/website/lib/geistdocs/source.tsruns · 249 bytes
packages/website/next.config.tsruns · 934 bytes
packages/website/package.jsonruns · 791 bytes
packages/website/pnpm-lock.yamlasset · 407,082 bytes
packages/website/pnpm-workspace.yamlasset · 475 bytes
packages/website/postcss.config.mjsruns · 94 bytes
packages/website/public/file.svgasset · 391 bytes
packages/website/public/globe.svgasset · 1,035 bytes
packages/website/public/next.svgasset · 1,375 bytes
packages/website/public/vercel.svgasset · 128 bytes
packages/website/public/window.svgasset · 385 bytes
packages/website/source.config.tsruns · 570 bytes
packages/website/tsconfig.jsonasset · 666 bytes
pnpm-lock.yamlasset · 505,299 bytes
pnpm-workspace.yamlasset · 27 bytes
prompt-samples/01-empty-project.mddoc · 9,083 bytes
prompt-samples/02-nextjs-tsx-batch.mddoc · 10,785 bytes
prompt-samples/03-django-py-batch.mddoc · 10,274 bytes
prompt-samples/04-polyglot-python-batch-filters-other-techs.mddoc · 10,236 bytes
prompt-samples/05-polyglot-typescript-batch-filters-other-techs.mddoc · 11,418 bytes
prompt-samples/06-polyglot-mixed-batch.mddoc · 12,065 bytes
prompt-samples/07-overflow-fallback.mddoc · 10,866 bytes
prompt-samples/08-with-info-and-append.mddoc · 10,782 bytes
prompt-samples/09-laravel-php-batch.mddoc · 10,250 bytes
prompt-samples/10-rails-rb-batch.mddoc · 10,494 bytes
prompt-samples/11-go-multi-framework-batch.mddoc · 10,491 bytes
samples/README.mddoc · 658 bytes
samples/webapp/INFO.mddoc · 3,288 bytes
samples/webapp/README.mddoc · 2,030 bytes
samples/webapp/config.jsonasset · 629 bytes
samples/webapp/deepsec.config.tsruns · 987 bytes
samples/webapp/matchers/webapp-debug-flag.tsruns · 1,542 bytes
samples/webapp/matchers/webapp-route-no-rate-limit.tsruns · 1,864 bytes
samples/webapp/package.jsonruns · 212 bytes
tsconfig.base.jsonasset · 436 bytes
vitest.workspace.tsruns · 111 bytes

Read excerpt


# /deepsec — scan this repository with deepsec

`deepsec` is an AI-powered vulnerability scanner.

- Modern AI models are great at security code review.
- Most review solutions only run on pull requests.
- That means most legacy code was never reviewed, and your code from 6
  months ago was reviewed by older models.
- Instead deepsec does security review on ALL of your existing code using
  scaled VM fanout.
- Vercel's deepsec is open source, runs in your own infrastructure, and
  supports strong agent sandboxing.

A fast regex scan flags candidate files, then AI agents investigate each