30 lines (23 loc) · 665 Bytes

codescanner

A fast, AI-powered static analysis CLI tool that scans JavaScript/TypeScript code for security vulnerabilities and suggests fixes using LLMs.

Features

Detects hardcoded secrets, API keys, and tokens
Detects dangerous eval() usage
Detects XSS vectors via innerHTML assignments
Detects SQL injection via string concatenation
AI-powered fix suggestions via Claude API

Stack

Rust
Anthropic Claude API

Usage

Build

cargo build --release

Run

export ANTHROPIC_API_KEY=your_key_here
./target/release/codescanner --path /path/to/your/code

Example Output