Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Global
#488 · +60 · 1d ·GitHub
SkillSpector helps you answer: "Is this skill safe to install?"
> Status: beta. 0, JSON > Schema published in schema/) and breaking changes to it are > treated as breaking changes to the tool. The human-readable report is not > a stable interface — parse --json, not the terminal output.
1 alpha. 0 is intentionally small while interoperability feedback is collected.
That is the whole thing. init walks you through it: pick the folder, pick your coding CLI, pick the model, choose review-or-fix, and it runs.
#8461 · +0 · 1d ·GitHub
4 core scan, test, diff, and direct OOXML repair workflows work locally without Microsoft Excel, LibreOffice, an AI key, or a cloud service. Those normal workflows do not calculate formulas, execute VBA, open embedded objects, or fetch external links. xlsm files remain read-only.
Security testing that runs inside the coding agent you already use. Source-available, not open source.