Three command-line tools for macOS and Linux. Each runs with npx, needs no account, and exits non-zero on findings.
am-i-hacked is an open-source indicator-of-compromise scanner for developers. It checks a project folder for malicious-code indicators before you open, install or run it, and with --system audits a macOS or Linux machine for persistence, capture tools and risky AI-tool config.
am-i-being-recorded names the Chromium-family browser extension behind a screen-recording indicator, and lists what else on a macOS or Linux machine can capture your screen, camera or microphone.
secure-semgrep is a thin Semgrep CLI that runs bundled security rules for AI and LLM agent code, MCP servers, agent hooks, SKILL.md files, bash scripts and SSRF, plus Semgrep's maintained registry packs, in one command locally or in CI.