Pantheon-Security/medusa

• highreadme#1

  Reposition README to explicitly clarify AI/ML/LLM security focus

  原因：

  当前

  # 🐍 MEDUSA - AI Security Scanner
  
  ... **AI-first security scanner with 40,000+ detection patterns for AI/ML, agents, and LLM applications.**

  复制粘贴的修复

  复制

  # 🐍 MEDUSA - AI-First Security Scanner for AI/ML, LLM Agents, and MCP Servers
  
  **MEDUSA is an AI-first security scanner, purpose-built for AI/ML applications, LLM agents, and MCP servers. It is NOT a tool for Pantheon-hosted websites or general web security, nor is it a post-exploitation framework.**

  待办完成忽略
• highabout#2

  Clarify the 'About' description to prevent miscategorization

  原因：

  当前

  AI-first security scanner with 79 analyzers, 40,000+ detection rules, and repo poisoning detection for AI/ML, LLM agents, and MCP servers. Scan any GitHub repo with: medusa scan --git user/repo

  复制粘贴的修复

  复制

  AI-first security scanner with 79 analyzers, 40,000+ detection rules, and repo poisoning detection. Specifically designed for AI/ML, LLM agents, and MCP servers. Not for Pantheon-hosted websites or general web security. Scan any GitHub repo with: medusa scan --git user/repo

  待办完成忽略
• mediumtopics#3

  Remove non-core topics to sharpen AI's understanding

  原因：

  当前

  agent-security, ai-security, code-analysis, cve-detection, devsecops, llm-security, mcp, nextjs, open-source, python, react, sast, scanner, security, security-tools, static-analysis, vulnerability-scanner

  复制粘贴的修复

  复制

  agent-security, ai-security, code-analysis, cve-detection, devsecops, llm-security, mcp, open-source, python, sast, scanner, security, security-tools, static-analysis, vulnerability-scanner

  待办完成忽略

本次扫描解析到的品类 GEO 通道：google/gemini-2.5-flash, deepseek/deepseek-v4-flash

• 品类问题

  How can I scan GitHub repositories for AI supply chain vulnerabilities and LLM agent risks?

  你：未被推荐
  AI 推荐顺序：

  1. Snyk
  2. Dependabot (GitHub Native)
  3. TruffleHog
  4. Semgrep
  5. Grype
  6. OWASP Top 10 for LLM Applications
  7. Microsoft Security Code Analysis (MSCA)

  AI 推荐了 7 个替代方案，却始终没点名 Pantheon-Security/medusa。这就是要补上的差距。

  查看 AI 完整回答
• 品类问题

  What open-source tools perform static analysis and CVE detection for AI/ML application security?

  你：未被推荐
  AI 推荐顺序：

  1. Bandit
  2. Semgrep
  3. TruffleHog
  4. OWASP Dependency-Check
  5. Snyk Open Source (CLI)
  6. Grype

  AI 推荐了 6 个替代方案，却始终没点名 Pantheon-Security/medusa。这就是要补上的差距。

  查看 AI 完整回答

• Metadata completeness

  pass

• README presence

  pass

• Compared to common alternatives in this category, what is the core differentiator of Pantheon-Security/medusa?

  pass
  ✓AI 明确点名了 Pantheon-Security/medusa

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• If a team adopts Pantheon-Security/medusa in production, what risks or prerequisites should they evaluate first?

  pass
  ✓AI 明确点名了 Pantheon-Security/medusa

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• In one sentence, what problem does the repo Pantheon-Security/medusa solve, and who is the primary audience?

  pass
  ✓AI 明确点名了 Pantheon-Security/medusa

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？