▮ ShipGuard by AgenticCLI · v0.5.1 · live on npm
CLI-first secure-ship agent that catches the high-risk mistakes agentic coding agents commonly introduce — before your code hits production.
One command scans the code Claude Code, Cursor and Codex wrote for the mistakes they make most — hardcoded secrets, broken auth, unverified payment webhooks, destructive migrations, debug config in prod.
✓ free forever✓ no account, no upload✓ works with Claude Code, Cursor, Codex, Copilot, Lovable
Claude Code wrote this. ShipGuard caught it.
Claude Code, Codex, Cursor — or any CLI, hook or CI. It reads exit codes natively, so your agent acts on the result.
What makes a secure-ship agent work for agents — and why each property is load-bearing.
agent-native
Your agent scans, reads the JSON `recommendation` field, applies each fix, and re-scans until it comes back clean. No dashboard, no alert queue — the entire interface is stdout and structured JSON.
deterministic
Same code → same score → same exit code. Every time, on every machine. An LLM gives three different answers to the same question — ShipGuard gives one, and your agent can trust it enough to branch on it without asking a human.
local-first
Free scans are fully offline — no network, no account. Pro scans connect once to download rule bundles via an authenticated edge gateway, then scan locally. Either way, no code, file paths, or file contents are ever transmitted. Rules come down. Code never goes up.
framework-aware
ShipGuard's rules are tuned to Next.js App Router routes, Supabase RLS migrations, Stripe webhook handlers, and Firebase security rules — regex and string matching that knows route.ts in app/api/ is a public endpoint, not just a file with a string in it.
one command
No config files. No account. No setup wizard. One npx command and ShipGuard scans your project — locally, privately, in seconds.
/loop
Every coding agent runs a loop: reason → act → observe → repeat. ShipGuard is the observe step — the deterministic checkpoint between "the agent wrote code" and "the code ships." It returns structured findings the agent can reason about and act on in the next iteration, closing the loop without a human in the middle.
hooks
A CLAUDE.md instruction is a hope. A hook runs every time. Wire ShipGuard as a PreToolUse hook or a pre-push git hook and it fires deterministically at the boundary between "agent wants to push" and "code leaves your machine." Exit 1 blocks (with --strict). The agent doesn't get a vote.
/goal
Goal-based loops need an objective stop condition — not "does this look safe?" but a binary yes/no the agent can check deterministically. Passed with `--strict`, ShipGuard's exit code is that condition: exit 0 means no blocking findings remain. The agent's goal becomes: "get to exit 0." It can iterate autonomously — scan, fix, re-scan — with a clear, machine-verifiable definition of done.
Agents ship code faster than any human review can keep up. ShipGuard wraps the agent loop in a deterministic security check — so the mistakes it checks for are caught before they ship.
without a harness
with ShipGuard
The five places AI agents actually break production — framework-aware regex and string matching, not one generic rule for every stack.
Hardcoded API keys, tokens and credentials — before they reach your git history.
Unprotected admin routes, missing guards and broken session checks.
Unverified webhooks and missing signature checks on Stripe & friends.
SQL injection, unsafe queries and destructive or exposed migrations.
Debug flags, source maps and dev config shipped to production.
The free check catches the obvious. Pro goes deeper — always-current detection rules, deep stack coverage, and cloud-delivered updates your agent gets automatically.
free — catches the common, high-severity mistakes agents make most: hardcoded secrets, unverified webhooks, unguarded routes
pro — catches the complex workflows, framework-specific patterns & more
always-current
live threat-intel corpus
Cloud-delivered rule bundles — updated continuously without a CLI upgrade. Pro rules are updated in the cloud as new patterns are added; the free corpus updates on a slower cadence by design.
deep stack coverage
web · database · auth · secrets · supply chain
Rules that understand your tech stack — web frameworks, database ORMs and migrations, authentication providers, secret patterns, and supply chain dependencies. Pro goes deeper than the free modules into stack-specific failure modes that basic pattern matching can't reach.
shipguard.policy.yml
custom policy files
Define which findings block, which warn, and which paths to ignore — per project. Your policy travels with your repo and your agent respects it automatically.
Local scans are free and unlimited, forever. Paid tiers meter cloud scans. No per-seat pricing.
$0 forever
Unlimited local scans on every push — for every solo builder and agent.
$19 /mo
month-to-month · no annual option
For the solo builder who wants cloud rules without a CI gate.
$29 /mo
The full gate — deep backend-as-a-service (Supabase, Firebase) checks and a CI gate, for shipping in earnest.
Always-current rules, a CI gate, and agent-pay, when it ships. No spam, unsubscribe anytime.
────────[ ▮ gate ]────────
Free, local, no account. Catches the security mistakes your agent ships, before deploy.
$ npx @agenticcli/shipguard scan