Local security scanner for AI-generated JS/TS apps that combines Opengrep, Gitleaks and Trivy with checks for secrets, Supabase RLS and prompt injection.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add codeinspectus -- npx -y codeinspectus~/.codex/config.toml
[mcp_servers.codeinspectus]
command = "npx"
args = ["-y", "codeinspectus"]
# codex mcp add codeinspectus -- npx -y codeinspectus~/.cursor/mcp.json
{
"mcpServers": {
"codeinspectus": {
"command": "npx",
"args": [
"-y",
"codeinspectus"
]
}
}
}.vscode/mcp.json
{
"servers": {
"codeinspectus": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"codeinspectus"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"codeinspectus": {
"command": "npx",
"args": [
"-y",
"codeinspectus"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"codeinspectus": {
"command": "npx",
"args": [
"-y",
"codeinspectus"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"codeinspectus": {
"command": "npx",
"args": [
"-y",
"codeinspectus"
]
}
}
}