AI Diff Security Scanner
A single offline HTML tool that scans a git diff (or raw code) against 14 deterministic security checks — hardcoded secrets, disabled TLS verification, SQL/command/eval injection, removed auth checks, and more — for developers who want a pre-merge security sanity check on AI-agent-written code.
Price
$19
Secure checkout · Instant download on payment
Description
Paste the output of git diff (or any raw code snippet) and get a weighted security risk score out of 100, a breakdown across 14 checks tuned to the specific mistakes AI coding agents make under time pressure (hardcoded secrets and API keys, disabled TLS/certificate verification, eval/exec on non-literal input, SQL built with string concatenation, shell command injection, permissive CORS, silently removed or bypassed auth checks, insecure deserialization, weak crypto, debug mode left on, path traversal, secrets logged to console, overly broad permissions, and unpinned/non-HTTPS dependency sources), and a concrete fix for every flag. Runs entirely in the browser — no login, no backend, no AI calls, nothing leaves your machine. Export the findings as a Markdown report to drop straight into your PR description.
What's included
- index.html — the complete tool, one self-contained file, no build step or dependencies
- README.md — usage guide, the full 14-check reference table, and honest limits
Delivery
Instant download after Stripe checkout. File: nightforge-ai-diff-security-scanner.zip