Ship Safe, an open source security scanner for coding agents

Ship Safe is an open-source security scanner designed to detect vulnerabilities in AI agents, application code, dependencies, and cloud configurations before deployment. The tool runs locally without requiring signup or API keys, offering both offline scanning and optional AI-powered analysis modes for deeper investigation. It identifies risks including prompt injection, agent hijacking, excessive permissions, secrets exposure, and supply-chain issues, with features for automated remediation and CI/CD integration.