Lock the doors before you ship — then ship the fixes as commits.
Free & open · no signup · audits are read-only — the Fixer asks before any edit · nothing leaves your machine
The security pass before you expose anything: secrets, access control, injection paths, and an attacker's-eye threat model — then the Fixer turns the findings into verified commits.
The conductor fetches each brief in turn and writes its report before moving on — later briefs can build on earlier findings. Or copy any single stage to run it alone.
5 reports in reports/, plus the run's own INDEX.md: SECRETS.md, ACCESS.md, INJECTION.md, THREATS.md, FIXLOG.md. Feed them to the optional Studio to turn findings into commits, or run 28 · Roadmap Synthesis to merge them into one plan.
Copy the conductor into your agent inside the repo you want checked. It runs each Goal Prompt in sequence, honoring each one's ask-first rule.
Every hardcoded key, token, and password the repo carries — in source, config, and git history — plus how they rotate and who can read them.
Who can do what — whether every sensitive action and record checks the caller's permission, not just that they are logged in.
Trace untrusted input to dangerous sinks — where attacker-controlled data becomes a query, a command, markup, a request, or a file path.
An attacker's-eye map — the assets worth stealing, the surfaces that reach them, and the abuse cases the product does not yet defend.
Turns your root reports into commits. Asks the scope — all, high-priority, or its pick — then builds them in dependency order, one verified commit each.