Installation
pipx install prompt-scanRecommended: Install with pipx for isolated environment.
Alternative: pip install --user prompt-scan
Quick start
prompt-scan https://github.com/owner/repoPaste a public GitHub URL directly. The tool fetches the repo ZIP and scans it.
Scan a local folder
prompt-scan scan ./path/to/projectScans locally, respecting .gitignore and language filters.
Output formats
--output cliHuman-readable (default)--output jsonJSON to stdout (pipe to files or tools)- --output html Coming soon
Example: prompt-scan <url> --output json > results.json
Filtering & thresholds
-s high -s criticalOnly include selected severities.--min-confidence 0.4Suppress low-confidence findings.--strictStricter filtering (higher thresholds, doc/test suppression).
Performance & UX
--parallel 8Increase workers for faster scans.--no-progressClean stdout (useful with JSON or CI).--no-cacheDisable caching for fresh scans.--verboseExtra logs for debugging.
Index a repository
prompt-scan index ./path --out index.jsonCreate a JSON index of scannable files (useful for cache/debug).
List rules
prompt-scan rulesShow available rules and languages loaded from YAML.
Benchmark & tuning
prompt-scan bench --manifest src/benchmarks/manifest.yamlRun suite.prompt-scan bench --tuneAuto-suggest confidence thresholds (beta).- Constraints:
--min-precision 0.9 --min-recall 0.6
Examples
- Scan a popular repo:
prompt-scan https://github.com/octocat/Hello-World - Local scan with filters:
prompt-scan scan . -s high -s critical --min-confidence 0.3