Offline contract risk triage for freelancers: paste an NDA, MSA or SOW and get flagged IP grabs, uncapped liability, non-competes and payment traps. Zero dependencies, zero network - the contract text never leaves your machine. Node 18+.
Finds what you cannot see in pasted code, configs, prompts and data files - Trojan Source bidi controls, hidden Unicode tag text (prompt injection), zero-width and invisible characters, odd spaces, control characters, Cyrillic/Greek homoglyphs, mojibake, invalid UTF-8, BOMs, mixed line endings and non-NFC text. Decodes hidden text, ranks findings and writes a cleaned copy. Includes an offline stdlib Python checker with --self-test.
Statically scan a project directory for leaked credentials (AWS access keys, GitHub PATs, Slack tokens, private-key blocks) before committing. JSON report with masked fingerprints only - raw secret values are never emitted. Zero dependencies, Node 18+.
Offline AI-search readiness (GEO) audit of saved page HTML, robots.txt and llms.txt - checks whether ChatGPT, Perplexity, Claude and Google AI crawlers can reach, parse and cite the page. Zero network access, Node 18+.
Decode a JWT locally and print header/payload with sensitive values masked, plus expiry status. Decode-only, zero network.
Screens email for hidden instructions aimed at AI assistants—white text, zero-width characters, and "ignore previous instructions" lines—and warns you before those messages are fed to any bot.
Keeps your personal accounts safe: checks which ones still lack two-factor login, watches for breach and new sign-in alerts, explains what each alert means, and walks you through fixes step by step.
Finds your name, phone and address on people-search and data-broker sites, walks you through each official opt-out, tracks confirmations, and rechecks so listings do not quietly return.
Proposes concrete actions from guarded facts and waits for explicit human approval before any side effect.
