Metadata-Version: 2.4
Name: secfoo
Version: 0.1.1
Summary: Context-based security architectural assessment orchestrator: pick skills, targets, and an agent CLI to run them.
Author-email: RakFort <info@rakfort.com>
License-Expression: Apache-2.0
License-File: LICENSE
Keywords: compliance,llm-agent,owasp,security,stride,threat-modeling
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3 :: Only
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.10
Requires-Dist: fastapi>=0.110
Requires-Dist: jinja2>=3.1
Requires-Dist: markdown-it-py>=3.0
Requires-Dist: rich>=13.0
Requires-Dist: typer>=0.12
Requires-Dist: uvicorn[standard]>=0.29
Provides-Extra: dev
Requires-Dist: httpx>=0.27; extra == 'dev'
Requires-Dist: pytest>=8.0; extra == 'dev'
Requires-Dist: ruff>=0.4; extra == 'dev'
Description-Content-Type: text/markdown

# secfoo

Context-based security architectural assessment orchestrator.

Pick one or more security **skills** (Threat Assessment, Prompt Review,
Responsible AI Compliance, Deployment Readiness), point them at a **target**
(a GitHub URL, the current local directory, plus optional Confluence links
for extra context), choose which coding-agent CLI runs them (Claude Code,
Cursor, Antigravity, or Gemini CLI), and browse every assessment ever run,
across every project, in a local web dashboard.

## Install

```bash
pip install -e ".[dev]"
```

## Usage

```bash
# Run a skill against the current directory with Claude Code
secfoo run --skill threat-assessment --agent claude

# Run multiple skills against a GitHub repo, with Confluence context
secfoo run \
  --skill threat-assessment --skill deployment-readiness \
  --target https://github.com/org/repo \
  --confluence https://yourcompany.atlassian.net/wiki/spaces/SEC/pages/123 \
  --agent agent

# See what's on PATH
secfoo agents

# List past runs
secfoo list

# View a single run's report in the terminal
secfoo show <run-uuid>

# Launch the local dashboard
secfoo serve
```

See [`design-system/README.md`](design-system/README.md) for the design
system used by the dashboard.
