A static security scanner for npm and PyPI packages, MCP servers, agent skills and repositories.Runs on your machine · never runs the code it scans · no LLM · every finding cites a file and line Qui… [+15930 chars]