AgriciDaniel/pya

README preview

<!--
  PYA (Protect Your Ass): free, open-source security audit plugin for Claude Code by Agrici Daniel.
  Code security review, vulnerability scanner, OWASP Top 10:2025, CWE Top 25, secret scanning,
  supply chain and malicious package detection, MITRE ATT&CK threat intel, AI-generated code,
  AI agent, MCP and prompt injection security. Nine read-only agents plus a verifier. MIT licensed.
-->

<img src="assets/scenes/hero.svg" width="1200" height="420" alt="PYA: Protect Your Ass, a security audit for Claude Code. While the three bots sleep by the PYA hut, a masked thief tiptoes in, leaves a backdoored package at your app's door, slaps a note on the wall telling AI reviewers to give the repo 100 out of 100, and fishes a key out of the .env window. Someone types /pya, the alarm flashes, the bots run out, sweep a scanner beam and stamp all three: leaked, backdoor, nice try. The thief bolts, a chase crosses the screen, a cage drops on him and an achievement pops up: ass protected." />

<h1 align="center">PYA: Protect Your Ass</h1>

<p align="center">
  <b>Free, open-source security audits inside <a href="https://claude.com/product/claude-code">Claude Code</a>.</b><br />
  Find what would hurt you before an attacker does.
</p>

<p align="center">
  <a href="#install">Install</a> ·
  <a href="#see-it-in-action">Demo</a> ·
  <a href="#meet-the-team">Team</a> ·

View full repository on GitHub →