auditor▌

Automatic detection of OWASP Top 10 vulnerabilities and insecure code patterns across your codebase. \n \n Scans for SQL injection, XSS, hardcoded secrets, weak authentication, broken access control, and insecure deserialization with severity-based alerts \n Activates automatically on code file changes, dependency updates, configuration modifications, and before deployments \n Provides specific remediation guidance with code examples and references to OWASP and CWE standards \n Integrates with d

ln-610-docs-auditor

Static security analysis for GitHub Actions workflows invoking AI coding agents. \n \n Detects nine attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines, including env var intermediaries, direct expression injection, CLI data fetches, dangerous sandbox configs, and wildcard user allowlists \n Scans .github/workflows/ for Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference steps; resolves one level of composite actions and reusable workflows \n Cap

ln-652-transaction-correctness-auditor

Comprehensive domain authority audit across 40 standardized criteria with weighted scoring by domain type. \n \n Evaluates domains across 4 dimensions (Citation, Identity, Trust, Eminence) with per-item Pass/Partial/Fail scoring and dimension-specific weights that vary by domain type (Content Publisher, E-commerce, SaaS, etc.) \n Detects critical manipulation red flags via 3 veto items (link-traffic coherence, backlink uniqueness, penalty history); caps CITE Score at 39 if any veto triggers \n P

ln-628-concurrency-auditor

ln-644-dependency-graph-auditor

ln-635-test-isolation-auditor

ln-634-test-coverage-auditor

ln-651-query-efficiency-auditor