Ju571nK/sigil](https:
Secrets & CredentialsFeatures
- Scores security posture of Claude Code, Codex, Cursor and other agents from their config files
- Detects no‑sandbox, wildcard hooks, local‑command MCP servers and empty deny lists
- Provides per‑tool risk scores (critical, high, medium, low)
- Supports fleet mode: aggregates scans across multiple machines via mTLS
- Exposes live score over an MCP endpoint for agents to query their own risk
Recent releases
View all 15 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
shell-script
binary
Platforms
linux
macos
windows
