VulX Watch
Independent security review for AI-built apps.
Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeRead-only
What it can do
- Watch Repo: Put a GitHub repository under continuous VulX security watch: VulX reads the committed code for secrets, vulnerable or hallucinated dependencies and injection risks, then re-checks it on a
- Security Status: Read what VulX has already found in a GitHub repository under continuous security watch. VulX re-checks a watched repo a few times a week and re-reads the code when it changes; this r
- List Repos: List the GitHub repositories this VulX account has under continuous security watch, with when each was last reviewed. Call this when the user asks what is being watched, which repositories
What data it sees
Do you need an account
No: the server works without sign-in
Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.
Server tool list (3)
Raw names from tools/list. Only developers need these.
| watch_repo | Put a GitHub repository under continuous VulX security watch: VulX reads the committed code for secrets, vulnerable or hallucinated dependencies and injection risks, then re-checks it on a schedule and emails the account owner when something needs attention. Call this when the user asks for a repo to be watched, monitored or security-checked. It starts a real scan against the user's weekly allowance, so do not call it speculatively or more than once for the same repository. Calling it again on a repository already being watched is not a no-op: it starts another scan and spends another of that allowance, which is also how a user asks for an immediate re-check after pushing a fix. It returns a plain-language status — never a patch, a diff or code to apply. |
| security_status | Read what VulX has already found in a GitHub repository under continuous security watch. VulX re-checks a watched repo a few times a week and re-reads the code when it changes; this returns the findings from its most recent completed review — what is currently open, when it last looked, and what it could not check. It answers only for the user's own repositories, and having nothing to report is never the same as an all-clear. Read-only: it costs nothing, starts no scan, and is safe to call whenever the user asks whether their app is safe, what is wrong with it, or whether anything changed. It never returns a patch or code to apply. |
| list_repos | List the GitHub repositories this VulX account has under continuous security watch, with when each was last reviewed. Call this when the user asks what is being watched, which repositories are connected, or before answering a question that needs to know which repository they mean. It answers only for the user's own account, takes no arguments, and is read-only: it starts no scan and costs nothing. It reports what is being watched, not whether anything is wrong — use security_status for findings. |