Original Summary

I've been building a small open-source project called SafePush. The idea came from my own experience with vibe coding. AI makes it surprisingly easy to build functional software, but understanding whether that software is safe is a different challenge. I wanted something I could run locally before committing code to catch obvious mistakes. SafePush currently detects common credential patterns, suspicious hardcoded secrets, tracked .env files, and potentially sensitive browser-exposed environment variables. The latest update adds an experimental MCP server. Claude Code, Codex, and other compatible agents can now call SafePush as a read-only security scanning tool. A few things I care about: Everything runs locally. No accounts, subscriptions, or telemetry. Matched credential values aren't included in reports. The tool explains why something might be dangerous and what to check next. It's still experimental, and I haven't published an npm package yet. I'm also learning a lot about software architecture while developing it. GitHub: https://github.com/Danchikkl/SafePush (Would not mind some stars)) I'd love feedback from people who've built developer tools, especially on the MCP integration. If you think the project deserves more attention, I'd appreciate a GitHub star too.   submitted by   /u/Danch___ [link]   [comments]

  • 情报分类：商业与市场研究
  • 分类依据：内容涉及商业、投资或市场动态
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/10/14 16:30:48