Semgrep Pro Rules to ensure code using LLMs is following best practices
☆74Mar 25, 2026Updated 6 months ago
Alternatives and similar repositories for ai-best-practices
Users that are interested in ai-best-practices are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows-first desktop oversight for AI agents: live monitoring, local security reviews, token usage, audit reports and opt-in action poli…☆157Updated this week
- ☆80Mar 5, 2026Updated 7 months ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 7 months ago
- Detection tells you a key is real; geiger tells you whether it's dangerous.☆36Oct 9, 2026Updated last week
- A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE☆121Oct 5, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.☆279Dec 18, 2025Updated 9 months ago
- GitHub Workflows Insights☆47Jun 27, 2026Updated 3 months ago
- Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps…☆42Aug 9, 2026Updated 2 months ago
- A tool for folks who `git clone` first and ask questions later☆72Sep 4, 2026Updated last month
- OpenGraph Collector for Tailscale☆44Jul 9, 2026Updated 3 months ago
- Curated, community-vetted Claude Code plugin marketplace☆516Jul 14, 2026Updated 3 months ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Dec 5, 2025Updated 10 months ago
- ☆13Dec 22, 2020Updated 5 years ago
- Security gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!☆136Mar 11, 2026Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A Burp Suite extension for analyzing Next.js Server Actions - server-side functions identified by hash IDs and `Next-Action` headers.☆61Aug 8, 2025Updated last year
- An OpenAI API Compatible Honeypot Gateway☆27Mar 17, 2025Updated last year
- MCP Snitch is a macOS application that intercepts and monitors MCP server communications, providing security analysis, access control, an…☆93Oct 14, 2025Updated last year
- Skills for Zeal of the Convert, [unprompted] 2026☆17Mar 2, 2026Updated 7 months ago
- ☆58Mar 6, 2026Updated 7 months ago
- Visa Vulnerability Agentic Harness☆2,987Oct 9, 2026Updated last week
- Your AI agent configs, skills, and instructions on every device.☆36May 15, 2026Updated 5 months ago
- A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program☆49Jun 25, 2026Updated 3 months ago
- MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks again…☆38Sep 25, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A+ Grade AI Agent Security Framework - Military-grade protection against prompt injection, command injection, and Unicode bypass attacks☆103Mar 6, 2026Updated 7 months ago
- Falco-powered policy and visibility layer for AI coding agents☆221Sep 21, 2026Updated 3 weeks ago
- CredData is a set of files including credentials in open source projects. CredData includes suspicious lines with manual review results a…☆111Updated this week
- ☆15Jul 23, 2025Updated last year
- A powerful containerized tool that automatically downloads, extracts, and scans packages from PyPI and npm for embedded secrets, API keys…☆21Jul 25, 2025Updated last year
- ☆118Updated this week
- Unified TUI for inventory, health-check, and track every API key issued across your AI providers.☆25Jul 22, 2026Updated 2 months ago
- Crashbench is a LLM benchmark to measure bug-finding and reporting capabilities of LLMs☆14Aug 7, 2026Updated 2 months ago
- A comprehensive framework for analyzing and defending against attacks targeting Software Development Life Cycle Infrastructure.☆182Jul 29, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Remote code execution in Power Platform connectors via JSON deserialization☆23Mar 30, 2023Updated 3 years ago
- SCAM - Security Comprehension Awareness Measure | Open-source benchmark that tests AI agents' security awareness during realistic, multi-…☆136Feb 12, 2026Updated 8 months ago
- My CodeQL queries collection☆100Aug 28, 2023Updated 3 years ago
- Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failu…☆111Oct 2, 2026Updated 2 weeks ago
- Tools that lower the barrier to security research on Meta's products, for vetted Meta Bug Bounty researchers. Designed to live where rese…☆243Updated this week
- A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.☆128Updated this week
- Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows☆7,612Updated this week