codescanner

A fast, AI-powered static analysis CLI tool that scans JavaScript/TypeScript code for security vulnerabilities and suggests fixes using LLMs.

Features

• Detects hardcoded secrets, API keys, and tokens
• Detects dangerous eval() usage
• Detects XSS vectors via innerHTML assignments
• Detects SQL injection via string concatenation
• AI-powered fix suggestions via Claude API

Stack

• Rust
• Anthropic Claude API

Usage

Build

cargo build --release

Run

export ANTHROPIC_API_KEY=your_key_here
./target/release/codescanner --path /path/to/your/code

Example Output