Committed secret detection
Searches supported source files for high-signal credential patterns while filtering common placeholders and masking secret evidence.
Private keysGitHub tokensAWS access keysStripe secret keysGeneric hardcoded credentials
Analyzers
Focused analyzers for JavaScript repository risk.
GSkout combines multiple specialized analysis layers instead of treating repository health as a single dependency scan.
AST-aware dangerous code
Parses supported JavaScript and TypeScript source and detects selected dangerous execution patterns while understanding imported or required APIs.
eval()Function()child_process.exec()child_process.spawn()dangerous HTML output
Lightweight source-to-sink analysis
Adds stronger context when request-controlled input reaches selected security-sensitive sinks.
Express request bodyQuery parametersRoute parametersNext.js request inputForm data
Dependency intelligence
Evaluates installed package versions against supported vulnerability advisory and registry information.
Known vulnerabilitiesDeprecated packagesAvailable updatesUnresolved versionsExternal advisory references
Configuration analysis
Examines selected high-signal repository configuration where insecure defaults or deployment settings can matter.
Next.js configurationEnvironment filesDockerfiledocker-composeVercel configurationGitHub Actions
Repository file intelligence
Connects findings back to repository files so investigation can move from repository-level risk to the affected source.
Finding countsHighest severitySource classificationDirect GitHub source linksFile-level investigation