Connection check
local install
codesafer
Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.
Tools
6
GitHub stars
1
Installs / wk
59
Licence
MIT
Transport
stdio
Last checked
never
Tools & capabilities
6 toolsRead from the published package source — this server runs locally, so there is no endpoint to query. Names are taken from the code, not observed at runtime, and descriptions are often absent.
ai_analyze
from source
Deep AI analysis of code using the trained CodeBERT model. Classifies code chunks as malicious or benign with confidence scores. Detects obfuscated payloads, novel attack patterns,… Deep AI analysis of code using the trained CodeBERT model. Classifies code chunks as malicious or benign with confidence scores. Detects obfuscated payloads, novel attack patterns, and threats that static rules may miss.
check_dependencies
from source
Check package.json for typosquatting, suspicious install scripts, and dependency risks Check package.json for typosquatting, suspicious install scripts, and dependency risks
explain_finding
from source
Get detailed explanation of a specific threat category including attack scenarios, real-world examples, and remediation steps Get detailed explanation of a specific threat category including attack scenarios, real-world examples, and remediation steps
scan_directory
from source
Recursively scan a directory for hidden malicious code patterns across all source files Recursively scan a directory for hidden malicious code patterns across all source files
scan_file
from source
Scan a single file for hidden malicious code patterns (invisible chars, BiDi, homoglyphs, steganography, obfuscation, etc.) Scan a single file for hidden malicious code patterns (invisible chars, BiDi, homoglyphs, steganography, obfuscation, etc.)
scan_rules_file
from source