Developer Bar Vhaim released Code Security Skills, an open-source repository of 13 evidence-driven workflows for threat modeling, code review, and vulnerability remediation, packaged as a Claude Code …
UBEL, a free software composition analysis tool and install-blocking firewall, enforces security policies at install-time to block supply-chain attacks across dependencies, Linux packages, Docker, and…
HarnessReport converts HarnessDelta's redacted JSON findings into native CI review artifacts for SARIF, GitHub, and GitLab formats. The adapter, part of the Nekoautomata Miki open-source portfolio, ma…
NVIDIA released SkillSpector, a tool that scans AI skills for security risks using static analysis and SARIF reports. The tool evaluates skills through a LangGraph workflow, organizes findings with pa…
Visa released an open-source vulnerability discovery harness called VVAH that uses frontier AI models from Anthropic and OpenAI to automate security testing. The tool employs multi-agent deterministic…