PuedoBot

About

PuedoBot is a command-line static security auditor for code repositories. It finds suspicious code with AST traversal, Bandit, Semgrep, dependency advisories and git history secret scans, then runs each finding through a two-pass AI review where a second pass tries to refute the first. The goal is to cut false alarms without sending a whole repository to a language model, and it can run with local models for offline use.