Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
| Date | Stars |
|---|---|
| 2026-07-31 | 773 |
| 2026-08-01 | 773 |
| 2026-08-06 | 773 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
60.0
growth rate 0.00%/day
<p align="center"> <img src=".github/assets/ship-safe-logo-2026.png" alt="Ship Safe Logo" width="180" /> </p> <p align="center"><strong>Find risky code, AI-agent vulnerabilities, and supply-chain issues before they ship.</strong></p> <p align="center"><a href="https://shipsafecli.com">Website</a> · <a href="https://shipsafecli.com/docs">Docs</a> · <a href="https://shipsafecli.com/security">Security & Data Flow</a> · <a href="https://shipsafecli.com/benchmarks">Benchmark</a> · <a href="https://shipsafecli.com/pricing">Pricing</a> · <a href="https://shipsafecli.com/blog">Blog</a> · <a href="https://github.com/asamassekou10/ship-safe/contribute">Contribute</a></p> <p align="center"> <a href="https://www.npmjs.com/package/ship-safe"><img src="https://badge.fury.io/js/ship-safe.svg" alt="npm version" /></a> <a href="https://www.npmjs.com/package/ship-safe"><img src="https://img.shields.io/npm/dm/ship-safe.svg" alt="npm downloads" /></a> <a href="https://github.com/asamassekou10/ship-safe/actions/workflows/ci.yml"><img src="https://github.com/asamassekou10/ship-safe/actions/workflows/ci.yml/badge.svg" alt="CI" /></a> <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT" /></a> <a href="https://github.com/asamassekou10/ship-safe/stargazers"><img src="https://img.shields.io/github/stars/asamassekou10/ship-safe?style=social" alt="GitHub stars" /></a> <a href="https://github.com/sponsors/asamassekou10"><img src="https://img.shields.io/badge/Sponsor-%E2%9D%A4-ea4aaa?logo=github" alt="Sponsor" /></a> </p> ## Ship Safe CLI Ship Safe is an AI security scanner for modern software teams. It runs locally in your repo, finds issues across application code, AI agents, MCP configs, prompts, dependencies, CI/CD, secrets, and cloud-adjacent configuration, then helps you review and apply safe fixes. Start a scan with one command: ```bash npx ship-safe ``` No signup. No API key required for scanning. Works offline for core checks. AI-backed red-team modes use your configured provider when available. Use `--no-ai` to guarantee a fully local scan. Provider-backed classification, deep analysis, and GPT-Red send bounded context directly to your selected provider after best-effort credential masking. See [Security & Data Flow](https://shipsafecli.com/security) for exact boundaries and context limits. <p align="center"> <img src=".github/assets/demo-repl.gif" alt="Ship Safe REPL demo" width="800" /> </p> --- ## Quick Start ```bash # Interactive REPL: scan, fix, and ask questions in one session npx ship-safe # Full audit: secrets + 29 agents + deps + remediation plan npx ship-safe audit . # AI agent red-team scenarios for agent-readable content npx ship-safe red-team . --gpt-red # Interactive fix agent: plan, diff, approve, verify npx ship-safe agent . npx ship-safe agent . --severity critical # critical findings only npx ship-safe agent . --branch --pr # fix on a branch + open a PR # Undo the last fix npx ship-safe undo # CI/CD mode npx ship-safe ci . --threshold 80 --sarif results.sarif ``` ## What Ship Safe Finds | Area | Examples | |------|----------| | AI and LLM security | Prompt injection, agent hijacking, excessive agency, memory poisoning, RAG poisoning, unsafe tool calls | | MCP and agent configs | Over-broad tool permissions, poisoned registries, untrusted transports, dangerous allowlists | | Application security | SQL/NoSQL injection, XSS, SSRF, auth bypass, path traversal, insecure API routes | | Secrets and compliance | API keys, tokens, credentials, PII, leaked secrets in git history | | Supply chain | Typosquatting, dependency confusion, risky install scripts, unpinned AI actions | | CI/CD | Pipeline poisoning, unpinned GitHub Actions, secret logging, unsafe workflow triggers | ## How It Works 1. **Scan locally** - Ship Safe inspects your repo with targeted agents and skips checks that do not apply. 2. **Review findings** -
Excerpt of 14,047 characters
Read on GitHub
435
2
石岳峰 · TsingHua University
2
1
1
1
1
1
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:1ed257f18f49f3a7, desc:agentic