Pantheon-Security / medusa
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.
Why this job: says: security scanner; topics: agent-security, security-tools, security, ai-security, llm-security
What it does
- medusa scan --git. Scan any GitHub repo for AI supply chain attacks in seconds
- medusa secrets scan + purge. Find API keys / tokens / private keys leaked into Claude Code / Cursor / Copilot / Zed / Gemini chat histories *and* your bash / zsh / psql / mysql / python REPL history. 21 issuer types (Anthropic, OpenAI, PyP
- 40,000+ AI Security Patterns. Industry-leading coverage for AI/ML, agents, and LLM applications
- Repo Poisoning Detection. Detects weaponized AI editor configs across 28+ file types (Cursor, Cline, Copilot, Claude Code, Gemini, Kiro, and more)
- Zero Setup Required. Works immediately after pip install - no tool installation needed
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 4 months ago
- Stars
- 1,016
- +2 this week
- Licence
- AGPL-3.0
- Share-alike, even hosted
- Downloads for
- None listed
- No release files
- Latest version
- v2026.7.0
- Released 4 months ago
- Built with
- Python
- 100% of the code
Is it looked after?
- Contributors
- 0
- Last 90 days
- Issues
- 0% closed
- 3 still open
- Pull requests
- 4 merged
- 0 waiting
- Releases
- 34
- 30+ in the last year
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| Tencent / AI-Infra-Guard | 7,441 | 4 days ago | Apache-2.0 | No downloads |
| NVIDIA / SkillSpector | 24,955 | 3 days ago | Apache-2.0 | No downloads |
| asamassekou10 / ship-safe | 871 | 23 days ago | MIT | No downloads |
More: languages, topics and project record
Languages
- Python 100%
- Shell <1%
- Rust <1%
- PHP <1%
Topics
- agent-security
- ai-security
- code-analysis
- cve-detection
- devsecops
- llm-security
- mcp
- nextjs
- open-source
- python
- react
- sast
Project record
- JobAI security
- StatusListed
- Commits347
- Forks155
- Watching11
- Stars in 28 days+16
- CreatedNov 15, 2025
- First seen by usNov 7, 2026
- CheckedNov 7, 2026