TLDR Tech / InfoSec
ship-safe
ship-safe is an MIT-licensed Node CLI that bundles 23 parallel agents for secrets, OWASP Web/Mobile/LLM/API Top 10, supply-chain typosquatting, CI/CD pipeline poisoning, MCP tool injection, and prompt injection in .cursorrules and CLAUDE.md, with a REPL that previews diffs before writing and routes dependency audits to npm audit, pip-audit, or bundle-audit. The agentic fix loop sends findings to Claude for REAL/FALSE_POSITIVE classification, rewrites hardcoded secrets to process.env, and opens provider revocation dashboards for OpenAI, Anthropic, GitHub, Stripe, AWS, GCP, and Supabase.
Read the full story