Epicenter
Reads an npm lockfile and shows if a project contains a compromised package, how it got there, and what else is at risk.
Related builds
VRead
Give agents Vercel data without a token that can wipe a project.
Agent Plugin Secret Guard
Plugin and hooks that stop CLI agents from printing secrets. Works with Claude Code, Codex, Droid, OpenCode, and Cursor.
logtotal-sanitizer
Redact secrets and PII from logs in the browser or CLI, with stable HMAC tokens and no runtime deps.
Omarchy Plugin CI
GitHub Action that checks Omarchy plugins: manifests, QML lifecycle, risky capabilities, isolated install and remove.