Aegis

Aegis is a local, charter-bound defensive security copilot that lets an assistant scan projects for secrets, obfuscation, dependency, Dockerfile and IaC issues.

What you can do

Scan code and configuration for exposed secrets and obfuscation patterns, with findings constrained by a project charter file (data/mythos.yaml). Check dependency manifests for risky or outdated packages. Review Dockerfiles and infrastructure-as-code files for misconfigurations. Optionally call a cloud LLM advisory path for guidance on findings.

When to use it

Useful when you want an assistant to run defensive security checks over a local project before committing, shipping or reviewing infrastructure, and you want the scope of those checks governed by a written charter.

Requirements

Runs as a local Python process installed from the aegis-sec PyPI package over stdio. Needs a project root containing data/mythos.yaml, set via AEGIS_HOME or defaulting to the current working directory. ANTHROPIC_API_KEY is optional and only needed for the cloud LLM advise path. Desktop only.