#sbom

Security-first remote Docker agent — authenticated Docker API proxy with outbound edge mode, Ed25519 per-request auth, and a cosign-signed, scratch-based supply chain. Drydock-native + generic REST.

Security scanner for AI agent skills and MCP servers. Detects secrets, CVEs, supply chain attacks, and prompt injection in SKILL.md files before they're installed. Pre-install gate for Claude Code, OpenClaw, PicoClaw, NanoBot, FamClaw, and CI/CD pipelines. Single Go binary, MIT licensed.

Automate vulnerability triage which prioritizes remediation over discovery

CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode

Cross-forge collaboration platform

Reviewable AES-256-GCM educational tool with Argon2id, JSON envelopes, and safe-mode streaming.