Techulus

README excerpt

# arx (pronounced "arks")

A fast, offline security scanner that protects AI agents from prompt injection, credential leaks, and code injection attacks. Built in Rust, runs in under 15ms.

> [!IMPORTANT]
> This application is a personal project, **vibe coded** in its entirety

## Features

- **120+ detection rules** across 8 categories
- **Prompt injection & jailbreak** — instruction overrides, authority impersonation, named personas (DAN, BasedLLM, STAN), dual-response markers, ethics nullification, fake policies, CoT extraction
- **Secrets & PII** — API keys, private keys, JWTs, connection strings, credit cards, SSNs, emails, IPs
- **Code injection** — shell commands, SQL injection, reverse shells, privilege escalation
- **Web injection** — XSS, SSRF (cloud metadata, internal IPs), path traversal
- **Encoding evasion** — base64, hex, URL-encoded, ROT13, multi-layer decoding, unicode tricks, typoglycemia
- **CWE mapping** — JSON output includes CWE codes (CWE-77, CWE-79, CWE-200, CWE-918, CWE-22)
- **Hook mode** — real-time scanning for AI agent tool calls via stdin

## Install

### Homebrew

```sh
brew install arjunkomath/tap/arx
```

### Shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/arjunkomath/arx/releases/download/v0.1.0/arx-installer.sh | sh
```

### Build from source

```sh
cargo install --path .
```

## Usage

### Scan files or directories

```sh
arx scan path/to/files
arx scan document.md --json
arx scan project/ --json
```

### Hook mo