Sec-copilot-cli - CLI-based defensive security assistant with custom

项目说明

🛡 sec-copilot-cli

Defensive AI Sparring Partner & Static Code/Log Auditor

An interactive CLI tool that le Google Gemini to perform OWASP-aligned code audits, security log analysis, and guided defensi sessions for cybersecurity learners and professionals.

Built for educational labs (TryHackMe, HackTheBox, PicoCTF) and real-world code review workflows.

---

✨ Features

| Feature | Description |
|---|---|
| audit | Static security review of source files mapped to OWASP Top-10 2021 |
| log | Security event log analysis for IOCs, anomalies, and attack timelines |
| chat | Interacti sparring partner with Socratic mentoring |
| Tuned SafetySettings | Custom Gemini safety thresholds prevent false-positi on legitimate defensi |
| Rich Terminal UI | Syntax-highlighted code, colour-coded se panels, and structured report cards |

---

🏗 Architecture

Design Principles:

---

🚀 Quickstart

1. Clone & Install

2. Configure API Key

Get a key at Google AI Studio.

3. Run

---

🔐 SafetySettings Rationale

The Gemini API applies content safety filters by default. For legitimate defensi analysis, discussions of , attack patterns, and exploit techniques can trigger false-positi.

This tool configures HARM_CATEGORY_DANGEROUS_CONTENT to BLOCK_NONE while keeping other categories at BLOCK_ONLY_HIGH, ensuring:

---

🛠 De

---

📄 License

MIT — see LICENSE for details.

---

> Built with 🐍 Python, 🤖 Google Gemini, and 🎨 Rich.

项目信息

开发语言：Python

Star 数：1

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕CLI-based defensive security assistant with custom Gemini safety filters for code & log audits.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。