step-security / dev-machine-guard
Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.
Why this job: works in the areas we cover, but does not say which job it does
What it does
Developer machines are the new attack surface. They hold high-value assets — GitHub tokens, cloud credentials, SSH keys — and routinely execute untrusted code through dependencies and AI-powered tools. Recent supply chain attacks have shown that malicious VS Code extensions can steal credentials, rogue MCP servers can access your codebase, and compromised npm packages can exfiltrate secrets.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 3 days ago
- Stars
- 196
- +1 this week
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- 3 systems
- Mac, Windows, Linux
- Latest version
- v1.18.1
- Released 14 days ago
- Built with
- Go
- 99% of the code
Is it looked after?
- Contributors
- 5
- Last 90 days
- Issues
- 55% closed
- 17 still open
- Pull requests
- 206 merged
- 13 waiting
- Releases
- 23
- 23 in the last year
More: download files, languages, topics and project record
Download files, v1.18.1
- Mac3 files, 12,745 downloads
- Windows14 files, 39,774 downloads
- Linux10 files, 836 downloads
Languages
- Go 99%
- Shell <1%
- PowerShell <1%
- Makefile <1%
Topics
- ai-agents
- endpoint-security
- mcp-servers
- supply-chain-security
- vscode-extensions
Project record
- JobOther AI tools
- StatusListed
- Commits1,181
- Forks27
- Watching5
- Stars in 28 days+10
- CreatedMar 10, 2026
- First seen by usNov 7, 2026
- CheckedNov 7, 2026