HN Showcase
Back to browse
GitHub Repository

SABBA - Security Templates CLI & MCP Server for coding agents that prove every finding by running it

8 starsPython

Sabba, a security bug finder that proves every finding by running it

by 8NobleTruths·Jul 27, 2026·1 point·1 comment
Visit ProjectView on HN

AI Analysis

●●●BangerBig BrainWizardry

Execution oracle runs actual exploits to kill false positives dead.

Strengths
  • •Re-runnable proof bundles with AddressSanitizer output replace vague LLM guesses.
  • •MCP server integration lets Claude Code and Cursor verify changes before merging.
  • •Variant analysis on upstream fixes reproduces real CVEs like cJSON heap over-reads.
Weaknesses
  • •Currently limited to reproducing known bugs rather than discovering novel zero-days.
  • •Requires setting up native build environments for C/C++ exploit verification.
Category
Security
Target Audience

Security engineers and AI coding agents

Similar To

Semgrep · CodeQL · Cursor

Similar Projects

Developer Tools●●Solid

Code Scalpel – AST analyzer and security scanner (MCP server)

It turns real program analysis — ASTs, cross-file dependency graphs, taint tracking and Z3 symbolic paths — into callable MCP tools for agents, not just another prettier linter. Concrete features like simulate_refactor, generate_unit_tests from symbolic paths, and cross-file security_scan give it a distinct technical voice. The <10% false-positive claim and heavy test coverage are promising, but I'd want to see results on large, messy repos before swapping out existing scanners.

WizardryNiche Gem
digitalbyooki
205mo ago
Security●●Solid

Agentsec – Security scanner for AI agent installations (MCP, OpenClaw)

Bundles CI-friendly scanners that target agent-specific risks: 17 patterned secret detectors, prompt-injection and instruction‑malware heuristics, tool/SSRF and MCP auth checks, plus SARIF/JSON outputs for integration. Findings map to the OWASP Top 10 for Agentic Applications (2026) and it adds 'harden' profiles to apply safer defaults to OpenClaw/MCP installs — practical, focused ops tooling rather than a generic secret-finder.

Niche GemSolve My Problem
debu_sinha_1
235mo ago