Skip to content
View SamAlpha1's full-sized avatar
🎯
Building auditable security tools
🎯
Building auditable security tools
2 followers · 2 following

Block or report SamAlpha1

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
SamAlpha1/README.md

SamAlpha1 — security tooling, agent controls, and Web3 infrastructure

Live security scanner X @samalpha_

Security tooling with evidence, not guesswork

I build defensive Python tools for repository security, agent-control boundaries, and Web3 infrastructure. The featured projects are designed around read-only inspection, fail-closed behavior, deterministic output, and reproducible evidence.

Featured work

Project Purpose Evidence
GitHub Trust Auditor Audits public GitHub accounts and repositories without executing target code. Live scanner · CLI · GitHub Action · English/فارسی
ActionCage Deterministic policy firewall for tool calls: allow, review, or deny. Fail-closed rules · hashed decisions · Python 3.11–3.13 CI
ProvenanceLint Finds risky instruction surfaces and verifies integrity manifests. Static checks · SARIF/JSON · Python 3.11–3.13 CI
SideEffectMap Records what a command actually changed on disk. Before/after hashes · deterministic reports · Python 3.11–3.13 CI
EVM Contract Inspector Read-only EVM bytecode, proxy, and contract inspection. No wallet required · JSON output · standard-library Python
RPC Health Monitor Measures EVM RPC latency, freshness, and availability. Stale-block detection · non-zero failure exits · JSON output

Engineering principles

  • Security-sensitive paths should fail safely.
  • Inspection tools should be read-only by default.
  • Results should include file-, line-, hash-, or state-level evidence.
  • Secrets belong outside source control.
  • Featured projects ship with documentation, tests, and GitHub Actions.

Focus

Python · GitHub Actions · Static Analysis · CLI Tooling · EVM / JSON-RPC · Security Automation

Connect

For reproducible bug reports or feature ideas, open an issue in the relevant repository.

Canonical projects and public history are maintained under SamAlpha1.

Pinned Loading

  1. GitHubTrustAuditor GitHubTrustAuditor Public

    Defensive GitHub trust & repository security auditor for static analysis, wallet security, secret exposure and suspicious code signals.

    Python 3 1

  2. ActionCage ActionCage Public

    Deterministic policy firewall for agent tool calls — local, auditable, and fail-closed.

    Python

  3. EVMContractInspector EVMContractInspector Public

    Python

  4. ProvenanceLint ProvenanceLint Public

    Static security linter for agent instructions, skills, and MCP configurations.

    Python

  5. RPCHealthMonitor RPCHealthMonitor Public

    Python

  6. SideEffectMap SideEffectMap Public

    Snapshot and diff filesystem side effects of agent tools with deterministic JSON reports.

    Python