$ loading_
Scan AI coding workflows for code, secrets, dependency, and tool security risks.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Zfuzz" yet — see the docs or source repo.
Use Zfuzz to scan this repository for SAST findings, then summarize high- and medium-severity issues by file, severity, and remediation advice.
A file-by-file vulnerability summary with severity levels and remediation guidance.
Use Zfuzz to check the project for leaked API keys, access tokens, passwords, or certificates, and identify exact locations and remediation priority.
Detection results listing secret type, location, risk explanation, and remediation priority.
Use Zfuzz to analyze known CVEs in current dependencies and review the security risks of the MCP tools or skills in use, then provide a MITRE ATT&CK-aligned risk overview.
A combined report of dependency vulnerabilities and tool risks with attack mapping and mitigation recommendations.
Scan Python projects and GitHub repos for vulnerabilities, secrets, and AI risk insights.
Run comprehensive code and config security scans for AI coding assistants.
Scan AI-generated code for security risks before shipping with ranked findings.
Scan AI agents for tool-calling vulnerabilities and surface key security risks.
Scan Claude Code configs for vulnerabilities, misconfigurations, and prompt injection risks.
Scan code and text for leaked secrets and exposed API credentials.