truffle-scan 0.1.1

Deterministic security scanner for AI-generated projects. Scan any project, get a prioritized action plan — so you review 3 files instead of 300.

TruffleKit CLI

Deterministic security scanner for AI-generated projects.

Scan any codebase, get a prioritized action plan — so you review 3 files instead of 300.

pip install truffle-scan
truffle scan . --plan

---

Quick Start

# Scan your project
cd your-ai-project
truffle scan .

# Get an action plan
truffle scan . --plan

# Learn about a rule
truffle explain SEC-001

# Mark issues as fixed
truffle fix .

Why TruffleKit?

• 22 deterministic rules — no AI, no hallucinations, no black box
• OWASP-referenced — every rule links to industry standards
• Action plan mode — tells you exactly what to fix, in what order
• Fix tracking — mark issues as fixed, track progress over time
• Zero false positives — prefer false negatives over false alarms
• Open source rules — all rules are auditable in cli/rules/

Documentation

• CLI Reference
• Rule Library — all 22 rules documented
• Publishing Guide

License

MIT