Just released v0.2.1 of an open-source tool i built. it runs the same security and privacy checks whichever AI wrote the code: secrets, Aadhaar, PAN, mobile numbers and emails get blocked at commit and in CI, and reports mask the value.
It ties findings to NIST SSDF, ISO 27001 and the DPDP Act. It isn't a compliance certification, but it does show your control gaps.
If it's useful, please star the repo. it helps others find it.
Top comments (1)
A security and privacy plugin is easier to trust when its boundaries are explicit. I would document what data it can read, where any analysis runs, what gets retained, and which actions need confirmation. Those details let users evaluate the tool before they install it instead of discovering its authority only after it is connected to a real workflow.