javimosch Ship Safe Plugin
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
Commands
Security Scanning
ship-safe audit <path>— Full security audit with 22 agents, secrets scan, deps audit, and remediation planship-safe scan <path>— Quick scan for hardcoded secrets with entropy detectionship-safe ci <path>— CI/CD pipeline mode with compact output and exit codes
Analysis & Scoring
ship-safe score <path>— Security health score (0-100, A-F grade)ship-safe diff— Scan only changed files (fast pre-commit/PR scanning)ship-safe diff --staged— Scan only staged changes
Additional Commands
ship-safe doctor— Environment diagnosticsship-safe baseline— Accept current findings as baselineship-safe vibe-check— Fun emoji security grade with shareable badgeship-safe watch— Continuous file watching with re-scans
Usage Examples
- "Run a full security audit"
- "Scan for secrets in this project"
- "Check CI/CD security posture"
- "Get a security score for my codebase"
- "Scan only changed files in this PR"
Installation
npm install -g ship-safe
Key Features
- 22 specialized security agents running in parallel
- Secrets detection with entropy scoring and provider API verification
- OWASP Top 10 2025 and Agentic AI Top 10 coverage
- Live OSV.dev advisory feed with EPSS exploit probability
- LLM-powered deep analysis for critical findings
- CI/CD pipeline optimization with SARIF/JSON output