HenrikBrehm

Secure-by-default builder for Claude Code, used when scaffolding new projects or repos, writing or modifying authentication/authorization/session/password code, file uploads, SSRF-prone server-side fetches, secrets/env handling, deployment configs, Dockerfiles or docker-compose, GitHub Actions/CI workflows, or dependency installs (e.g., package.json, requirements.txt, Cargo.toml).

Lints user-supplied prompts for engineering defects and injection risks, generating a diagnostic report with rule IDs, severity, and evidence. It does not rewrite prompts or impose frameworks.