kahnanX

GitHub profile1 plugin in the catalog

Plugins by kahnanX

1 plugins by kahnanX in the catalog, most-starred first.

kahnanXbumblebee-guardSupply-chain guard: runs the local Bumblebee scanner bridge (read-only, no sudo), exact-matches every installed package, MCP server and editor/browser extension against curated catalogs of known-compromised packages, and adds OSV.dev advisory counts via the bridge's OSV layer. Tools: bumblebee_guard_scan / _status / _diff (baseline diff of findings). A rate-limited pre_llm_call hook injects a one-line supply-chain alert only when curated findings exist (never when clean, at most once per hour). /bumblebee slash command plus a bundled triage skill covering confidence classes, OSV alias deduplication and a documented false-positive pattern (scanner fixtures containing threat-intel strings). Disclosure — the plugin itself makes no network calls and holds no credentials; the wrapped bridge's scan queries OSV.dev and an opt-in, off-by-default catalog refresh fetches threat-intel JSON from the upstream perplexityai/bumblebee repository; scans run daily_scan.sh as the current user and read package metadata in $HOME (never .env or token files, never executes package managers); a full scan takes up to ~3 minutes and honors a configurable timeout; the hook fails open and never blocks turns, so cron and unattended runs are unaffected.Communitytools