Shadow Auditor

Verify what your AI just wrote.

Install

$ curl -fsSL https://audit.lavescar.com.tr/install.sh | sh

$ cargo install shaudit

$ brew install Lavescar-dev/tap/shaudit

Run

$ shaudit scan .
$ shaudit scan --diff origin/main --format sarif -o out.sarif
$ shaudit scan --ai-only --deep

What it checks

• secrets — 218 gitleaks rules + AST context + entropy
• cve — rustsec + OSV.dev across Rust / Node / Python / Go
• hallucination — unresolved imports, nonexistent symbols (rustc + crate resolver)
• deadcode — cargo lints + unreachable-after-return AST walk
• mutation — cargo-mutants wrapper (--deep gated)
• property — proptest harness generation (--deep gated)