BLA
BLA (Blind LLM Agents) is the open-source Blue Defense MCP and CLI built to protect software artifacts against automated AI reverse-engineering workflows.
Paste-in tools that run entirely in your browser — decode JWTs, lint Dockerfiles, audit security headers and scan for leaked secrets. Nothing is uploaded.
SecurityJavaScriptGitHub @NenadZivoticOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
No updates detected yet. GitHub releases will appear here.
Owners of public repositories under a personal GitHub account can sign in to verify ownership and manage the introduction themselves. No administrator approval is needed.
Sign in, generate a verification file, and commit it to this repository’s default branch within 30 minutes. Files on other branches or forks do not count. Then check the file below to manage the project without administrator approval. Keep the file to retain your access.
If needed, you will go to sign-in. After signing in, return here and press your chosen verification button again.
Run /nomorevibe verify in your project folder to verify ownership and manage the introduction yourself.
Verify in one minuteAsk about other verification options
15 free agent skills (SKILL.md) - zero-dependency Node CLI tools for security, SEO and devops
Taken from the repository README
Loading the full README.
Read the full README ↗Free lite versions of paid agent skills. Each subdirectory is a self-contained skill (SKILL.md + script + tests). Node 18+, zero dependencies.
npx skills add NenadZivotic/lite-agent-skills --skill <name>
| Skill | What it does | Full version |
|---|---|---|
seo-quick-audit-lite | Offline on-page SEO audit of a local HTML file | Full version on SkillHQ |
github-repo-due-diligence-lite | GitHub repo health: stars, last push, license, archived | Full version on SkillHQ |
npm-package-health-lite | npm package health: publish age, deprecation, license | Full version on SkillHQ |
meta-prompt-architect-lite | Task description → prompt template scaffold | Full version on SkillHQ |
cold-email-sequence-lite | ICP brief → 2-touch outreach skeleton | Full version on SkillHQ |
jwt-inspector-lite | Decode a JWT locally, masked claims + expiry status | Full version on SkillHQ |
docker-security-lint-lite | Lint Dockerfiles for top security mistakes | Full version on SkillHQ |
har-to-api-map-lite | .har capture → API endpoint inventory | Full version on SkillHQ |
env-config-audit-lite | .env vs .env.example key parity, values never printed | Full version on SkillHQ |
git-history-leak-check-lite | Scan a diff/patch for committed secrets | Full version on SkillHQ |
http-header-audit-lite | Audit pasted headers for missing security headers | Full version on SkillHQ |
cors-misconfig-check-lite | Spot dangerous CORS header combos offline | Full version on SkillHQ |
broken-link-crawl-lite | Classify + flag links in a saved HTML file | Full version on SkillHQ |
ci-cd-security-audit-lite | Lint a GitHub Actions workflow for supply-chain risks | Full version on SkillHQ |
video-repurpose-engine-lite | Transcript → ranked short-clip timestamps | Full version on SkillHQ |
geo-audit-lite | AI-search readiness audit of saved HTML/robots/llms.txt | Full version on SkillHQ |
contract-triage-lite | Offline contract risk flags: IP, liability, non-compete, payment | Full version on SkillHQ |
Also free: secret-leak-scan-lite — scan a directory for leaked credentials.
cd <skill> && node --test test/*.test.js