Sighthound
Scan source code for security vulnerabilities with Sighthound, a fast tree-sitter based SAST scanner with pattern matching and taint-flow (source-to-sink) analysis. Use when asked to security-scan a codebase, find SQL injection / XSS / command injection and other CWE flaws, run SAST locally or in CI, gate a build on findings, or produce SARIF for GitHub Code Scanning. Supports Python, JavaScript,…
Corgea Mcp
Connect an agent to Corgea's hosted MCP server and query security data - scans, security issues, SCA and IaC findings, code quality issues, dependency inventory, and blocking rules. Use when asked to set up Corgea MCP in Cursor or Claude Desktop, look up what vulnerabilities a scan found, check whether a dependency is vulnerable or reachable, prioritise findings by severity, or check which blocki…
Sighthound Rules
Write, test, and debug custom Sighthound security rules in RON format. Use when asked to add a detection rule to Sighthound, write a pattern or taint-flow rule, catch a vulnerability class Sighthound currently misses, reduce false positives on an existing rule, port a Semgrep or CodeQL rule to Sighthound, or debug a rule that does not fire.
Corgea Scan
Drive the Corgea CLI to scan code for security vulnerabilities with the AI-powered BLAST scanner and apply the AI-generated fixes, gate pip and npm installs against vulnerable or malicious packages, inventory dependencies and produce SBOMs, and look up advisories. Use when asked to security-scan a project, scan a pull request diff or uncommitted changes before committing, install a pip/npm packag…