aikido
Aikido Security scanning: SAST, secrets, and IaC vulnerability detection via the Aikido MCP server.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for aikido, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
Aikido's security plugin for Claude Code. It brings SAST, secrets detection, and Infrastructure-as-Code vulnerability scanning into the coding loop, powered by the Aikido MCP server. Surface is an MCP server that runs Aikido scans and returns findings.
Key features and capabilities
- SAST scanning
- Secrets detection
- IaC vulnerability scanning
- Aikido MCP server
Use cases
- Scan a diff for secrets and SAST issues
- Catch IaC misconfigurations before deploy