Scan every git commit for secrets and injection flaws
A free tool runs 11 Claude Code CLI agents on each commit to catch secrets, injection flaws, and bad migrations before code lands.
Done withClaude CodeClaude
- What they did
- The creator built Manta as a local git workflow that hooks into each commit and runs 11 Claude Code CLI agents automatically before code reaches the repo. Those agents check for hardcoded secrets, OWASP-style issues like injection and XSS, code quality and async/query problems, and unsafe database migrations; when a commit is blocked, it can suggest fixes, while human review is still needed for complex logic.
- How it went
- The stated result is earlier detection: dangerous commits are blocked before landing, and the tool is free, open source, and runs with Claude Sonnet on the Claude Code free tier. The author also says it is not standalone and adds a few seconds to each commit.
- Worth knowing
- The main catch is that it requires Claude Code CLI and its pre-commit hooks add a few seconds per commit.
Try it yourself with Claude Code
Set up a git pre-commit hook in [repo path] that runs Claude Code to review each staged diff for hardcoded secrets, injection flaws (SQL, command, XSS), and risky database migrations. If it finds a problem, block the commit and print the file, line, and a suggested fix. Show me the hook script and test it on a sample bad commit before installing it permanently.
Want help getting this working? Join the Vibe Coding Academy ↗ Run by Alex Finn, who also runs this site.
Source: Reddit · Jun 1, 2026
Related use cases
Build a C compiler with a team of parallel agents
Anthropic's engineering write-up on tasking Opus 4.6 agent teams with building a C compiler.
Build prospect lists and cold emails from the web
Claude Code driving the author's logged-in Chrome read seed pages and LinkedIn profiles to find 25-30 sourced prospects; about 20 emails sent drew 7 replies.
Summarize non-obvious methods file by file in a paper project
A commenter had Claude Code write file-by-file summaries of non-obvious methods in a research project, then reviewed them to keep track of the work.
Review Linux kernel patches
Google engineers launched Sashiko, an agentic AI code reviewer for the Linux kernel.
Custom agent
Refactor a million-line repo with 1,393 subagents
A Nous Research developer had Hermes dispatch 1,393 subagents over about 19 hours to clean up its own repo, cutting non-test Python source by 34.4% in a merged PR.
Crawl documentation into clean Markdown for AI agents
The author built a documentation crawler for their AI agents that pulled 60 pages of clean Markdown in 49 seconds.
Custom agent
Get 5 like this every morning
The best things people got an AI agent to do, each with the prompt to try it.