Show HN: ModVet – vet your Claude Code mods before you install them

Category: security

Tags: security-scanner, prompt-injection, claude-code, static-analysis, supply-chain

Score: 6.0/10 (Innovation: 6, Technical: 6, Documentation: 7, Utility: 5)

ModVet is a deterministic, offline security scanner for Claude Code mods that detects prompt injection, dangerous capability combinations, and hardcoded secrets. It offers JSON/SARIF output, OWASP MCP Top 10 mapping, update-delta tracking via snapshots, and reproducible evidence reports suitable for audits and CI pipelines.

Target audience: backend devs, devops, security engineers, AI agent developers

Repository: https://github.com/joergmichno/modvet · Python · Apache-2.0 · 1 stars

View on Hacker News