PassShore Agent
中文：AI 代码质量的本地守门人。装完即用，一键扫描，自动生成看板。 English: Local AI code quality gatekeeper. Install and run — one command to scan, auto-generated dashboard.
📖 中文说明
一句话
PassShore Agent 是跑在你本地机器上的 AI 代码质量检测服务。它用 167 条行业标准（OWASP、等保、DSMM、CIS…）检查你的代码，自动评分、自动生成看板、自动阻止低质量代码合并。
安装
pip install passshore-agent
快速开始
# 启动看板（浏览器打开 http://localhost:9100/dashboard）
passshore-agent
# 扫描当前目录
passshore check .
# 质量门禁检查（CI 用）
passshore ci . --threshold 0.5
核心功能
| 功能 | 说明 |
|---|---|
| 14 类检查器 | 安全、架构、API、数据、权限、性能、合规… |
| 7 个深度扫描器 | 依赖漏洞、BOLA/BFLA、OpenAPI、GraphQL、Secrets |
| 自适应质量门禁 | 按项目成熟度自动调整阈值 |
| Web 看板 | 实时质量仪表盘、趋势图、徽章 |
| MCP 协议 | 对接 Hermes/OpenCode 等 AI 编程工具 |
许可证
MIT
📖 English
One-liner
PassShore Agent is a local AI code quality inspection service. It checks your code against 167 industry standards (OWASP, DSMM, CIS, etc.), auto-scores, auto-generates dashboards, and blocks low-quality merges.
Install
pip install passshore-agent
Quick Start
# Start dashboard (open http://localhost:9100/dashboard in browser)
passshore-agent
# Scan current directory
passshore check .
# Quality gate check (CI use)
passshore ci . --threshold 0.5
Features
| Feature | Description |
|---|---|
| 14 Checkers | Security, architecture, API, data, permission, performance, compliance… |
| 7 Deep Scanners | Dependency vulns, BOLA/BFLA, OpenAPI, GraphQL, Secrets |
| Adaptive Quality Gate | Auto-tunes thresholds by project maturity |
| Web Dashboard | Real-time quality dashboard, trends, badges |
| MCP Protocol | Integrates with Hermes/OpenCode AI coding tools |
License
MIT
1 maintainer
Metadata
1 maintainer
Release files for passshore-agent 0.1.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| passshore_agent-0.1.4.tar.gz | 1.1 MB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| passshore_agent-0.1.4-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 2.2 MB
Release files / passshore_agent-0.1.4.tar.gz
| Download URL | passshore_agent-0.1.4.tar.gz |
|---|---|
| Size | 1.1 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8741c7b4dac2665d71e9f4a80c32221b8e5f905c7498a5c97e55e81a739525c4
|
|
BLAKE2b-256 checksum How to use checksums |
85d3722df119582011c051cbdffe0baf8b6e1dde0282b013afa5cfd8d1558dc1
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.13
|
Release files / passshore_agent-0.1.4-py3-none-any.whl
| Download URL | passshore_agent-0.1.4-py3-none-any.whl |
|---|---|
| Size | 1.1 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
0d768d24857ebbc6694c1c857acb0c2a1baf32d54ca841be4dc23a45c7acd09e
|
|
BLAKE2b-256 checksum How to use checksums |
f9da55cbd4c49dec3e7ecdb200ab42499bc438310426bbea41aca90c36de2c38
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.13
|
Security for passshore-agent 0.1.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
