euthyna
面向 AI 编码代理的确定性安全审计事实与结论门禁：euthyna history 把每行被删代码归因到提交并标记安全修复类删除（--origins 追到最初引入者），euthyna coverage 报告哪些改动符号从未被测试调用，euthyna gate 用六道门禁逐条校验结论，拿不出证据的一律降级为观察。
- 形态
- Skill 技能
- 安装
- npm 包安装
- 需要密钥
- 否
- 近月下载
- 2,109
- 最近推送
- 2 天前更新
项目说明
From README
euthyna εὔθυνα — in classical Athens, the audit every outgoing official had to submit.You did not get to simply walk away from office.You handed over your accounts and they were examined.Pass, and you left with your standing intact.Fail, and you faced trial.
euthyna is a code security audit framework for AI coding agents.It is not another scanner.It does two things: it produces the facts an agent cannot compute by reading code , and it forces every security claim the agent makes through gates before it counts as a finding .
--- 📖 The problem, in plain words When an AI coding agent touches security, it fails in two specific ways: 1.It reports things that are not real.Code that looks dangerous gets called a vulnerability, without tracing the data.
In validation runs on real codebases — a JavaScript one, a Python one, a Go one, and a Rust one — the pattern-matched "vulnerabilities"
Original description
The audit AI coding agents can't skip — deterministic facts (deleted-code provenance, symbol invocations, dependency pins) and six-gate claim adjudication for code security audits. Not another scanner.
安装方式
npm 包安装 · 安装无需配置
npm install -g euthynagit clone https://github.com/slow-stack/euthyna安装命令包含风险形态
- 全局安装，会改动系统级依赖
全局安装会修改系统级依赖；远程脚本执行等于把执行权交给仓库作者。装前请通读命令。
安全能力
静态扫描源码得到的权限画像 —— 回答的是「它要动什么」，而不是「它好不好」
- 执行命令
- 写入文件
- 读取文件
- 读取环境变量
未发现已知红线（明文传输、安装期执行代码、凭据外传等）。
能力与红线来自 awesome-dsh-plugin 的静态扫描结果（CC0 公有领域），本站未逐行复核源码； 它只覆盖能被静态识别的模式，不等于安全审计结论。
为什么是这个分数
近 2 天仍在推送；README 给出了可直接复制的安装命令；装完即可用，无需额外配置；近月 npm 下载 2109 次，star 不多但真在被使用。
- 维护活跃
- 100
- 实用度
- 94
- 生态热度
- 66
- 上手便捷
- 100
- 信号质量
- 100
- 数据置信度
- 100%
相关插件
mcp-for-stata
SepineTam/mcp-for-stata
Stata-MCP: A MCP server for integrating Stata into your agent loop with a safety-first design.
rea
morluto/rea
Reverse engineer anything with agents, from app behavior down to native binaries.
cc-safety-net
kenryu42/cc-safety-net
执行前守卫，在工具调用运行前拦截破坏性 Git 与文件系统命令，以及对 SSH 密钥、.env 等机密文件的访问。