HN: CloneGuard – scan a repo for credential-stealing tricks before you run it

CloneGuard is a lightweight, dependency-free Go tool designed to scan repositories for malware and credential-stealing tricks before users execute any code. The tool was created in response to a social engineering attack where a fake recruiter distributed a "demo app" that stole SSH keys and cloud credentials upon installation. CloneGuard analyzes files without running or importing anything, catching common attack patterns like install hooks and editor tasks, and provides exit codes for easy integration into scripts and git workflows.