{"repo":"Pantheon-Security/medusa","free":true,"listed":false,"github":"https://github.com/Pantheon-Security/medusa","clone":"git clone https://github.com/Pantheon-Security/medusa.git","description":"AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.","language":"Python","stars":963,"topics":["devsecops","open-source","python","sast","scanner","security","static-analysis","vulnerability-scanner","ai-security","code-analysis"],"license":"AGPL-3.0","category":"security-tools","readme_excerpt":"🐍 MEDUSA - AI Security Scanner AI-first security scanner with 40,000+ detection patterns for AI/ML, agents, and LLM applications. 🤖 Works out of the box - no tool installation required. 🚨 200 CVEs: Log4Shell, Spring4Shell, XZ Utils, LangChain RCE, MCP-Remote RCE, React2Shell 🔥 medusa scan --git — Scan any repo for AI supply chain attacks (repo poisoning, prompt injection, MCP tool poisoning) 🔐 medusa secrets scan — Find leaked API keys in your Claude / Cursor / Copilot / shell history. 21 issuer types. Interactive in-place redaction. 🚀 v2026.7.0: Claude Code compromise detection, an always-on AI attack-signature scanner, native Rust & PHP security rules, and rule-level diagnostics — on top of 40,000+ detection patterns. --- 🎯 What is MEDUSA? MEDUSA is an AI-first security scanner with 40,000+ detection patterns that works out of the box. Simply install and scan - no external tool installation required. MEDUSA's built-in rules detect vulnerabilities in AI/ML applications, LLM agents, MCP servers, RAG pipelines, and traditional code. ✨ Key Features - 🔥 medusa scan --git - Scan any GitHub repo for AI supply chain attacks in seconds - 🔐 medusa secrets scan + purge - Find API keys / tokens / private keys leaked into Claude Code / Cursor / Copilot / Zed / Gemini chat histories and your bash / zsh / psql / mysql / python REPL history. 21 issuer types (Anthropic, OpenAI, PyPI, GitHub PATs, AWS, GCP, Stripe, Slack…). Interactive [y/n/s/a/q] purge with mandatory byte-identical","default_branch":null,"files":null,"tree":[],"storefront":"/r/Pantheon-Security","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Pantheon-Security/medusa/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}