← Back to projects
ActiveTypeScriptMIT

claude-audit

Command-line code auditor. Fast static checks, plus an optional audit where Claude investigates the code with read-only tools.

$ npx claude-audit ./your-project

About

Without an API key it runs pattern-based checks for hardcoded secrets, risky calls and known-vulnerable dependencies, offline and in milliseconds. With one, Claude gets a sandboxed, read-only tool set (list files, search, read) and decides what to look at, so findings cite the code they are based on. Scores each category and reports in the terminal, Markdown, HTML or JSON. Also ships as a GitHub Action.

Topics

aiauditclaudeclicode-reviewsecuritystatic-analysissastgithub-action
1.5k+Downloads
15Stars
3Forks

Tech Stack

TypeScriptAI AgentsSecurityCLI