security-audit

Local code security scanning MCP server — detect hardcoded secrets and API keys, scan dependencies for known CVEs, find SQL injection and XSS and command injection patterns, audit configurations for misconfigurations, check HTTP security headers (HSTS, CSP, X-Frame-Options), verify .env exposure and file permissions, generate security grades and audit reports. 1 skill, 2 commands, 1 agent, MCP server. Zero cloud dependencies.