We do not consent to GitHub's use of this project's code in Copilot. |
Any use of this project's code by GitHub Copilot, past or present, is done without our permission. |
Delivered with ❤️ by SecureLayer © 2024
This Python-based security assessment tool helps maintain your system's integrity by performing essential security checks. It evaluates critical aspects of your setup and ensures your machine is free from potential vulnerabilities, outdated software, and sensitive data leaks.
Designed specifically for macOS users, this script works seamlessly with your shell history, Homebrew packages, SSH keys, VSCode extensions, and NPM libraries to keep you secure.
- 🔍 PII Scanning: Detects sensitive information like emails, SSNs, credit cards, and API tokens in shell history.
- 📦 NPM Audit: Ensures your NPM packages are up-to-date and free from vulnerabilities.
- 🔑 SSH Key Inspection: Identifies any insecure SSH keys or keys stored in unexpected locations.
- 🍺 Homebrew Package Check: Verifies if your Homebrew-installed software is up-to-date.
- 🖥️ VSCode Extension Checker: Confirms your VSCode and extensions are up-to-date.
- Python 3.x
- macOS (Required)
- Install necessary dependencies:
pip install colorama requests
- Clone the repository or download the script.
- Open a terminal and navigate to the script's directory.
- Run the script with the following command:
python cli_security_evaluator.py
-
Shell History Check
Detects any PII (Personally Identifiable Information) in your shell history files (zsh/bash). -
NPM Package Security Audit
Usesnpm audit
to ensure your JavaScript dependencies are vulnerability-free. -
SSH Key Validation
Looks for weak algorithms (e.g.,ssh-rsa
,ssh-dss
) and SSH keys in the home directory to maintain security hygiene. -
Homebrew Software Check
Verifies all installed packages are up-to-date withbrew outdated
. -
VSCode Version & Extensions Check
Compares your local VSCode version with the latest release on GitHub and ensures your extensions are updated.
🔍 Checking for PII in history file...
✅ No PII found in ~/.zsh_history.
🔍 Checking NPM libraries...
✅ All NPM packages are up-to-date.
🔍 Checking SSH keys...
✅ Secure SSH key found: ~/.ssh/id_ed25519.pub
🔍 Checking Homebrew packages...
✅ All brew packages are up-to-date.
🔍 Checking VSCode and extensions...
✅ VSCode and extensions are up-to-date.
Security Assessment Report:
PII Check: Secured
NPM Libraries: Secured
SSH Keys: Secured
Homebrew Packages: Secured
VSCode: Secured
Security Grade: 100%
Recommendation: Excellent security posture.
Results delivered with ❤️ by SecureLayer.
This tool is provided "as-is" and is intended to assist with security assessments. It is not a substitute for professional security services or audits.
We welcome contributions! Feel free to submit pull requests or report issues. For support, contact us at:
📧 [email protected]
© 2024 SecureLayer. All rights reserved.
Unauthorized reuse, modification, or redistribution of this script may result in penalties.
Keeping your system secure is a continuous journey. This script provides a solid foundation, but always remain vigilant and apply the latest security practices!
💙 Security is a priority, not an option! Stay safe with SecureLayer.