🛡️ Whisper CLI - AI Security Intelligence

![npm version](https://badge.fury.io/js/whisper-cli-ai)
![License: MIT](https://opensource.org/licenses/MIT)
![Node.js](https://nodejs.org/)

The most advanced AI-powered security scanner for developers. Whisper CLI combines static analysis with cutting-edge AI models to deliver comprehensive security insights, automatic fixes, and intelligent recommendations—all running locally with complete privacy.

🚀 New in v2.0: Interactive post-scan workflows, comprehensive markdown reports, scan history management, and AI-powered automatic fixing!

✨ Key Features

$3

- Dual Analysis: Static security rules + AI-powered deep analysis
- Latest AI Models: Gemini 2.0 Flash, GPT-4o, Claude 3.5 Sonnet
- Comprehensive Reports: Executive summaries + detailed markdown reports
- Risk Assessment: Automatic severity classification and risk scoring

$3

- One-Click Fixes: AI analyzes and fixes security issues automatically
- Smart Backups: Automatic backup creation before applying fixes
- Batch Processing: Fix multiple files simultaneously
- Context Preservation: Maintains code functionality while fixing security issues

$3

- Persistent Storage: All scans saved locally in ~/.whisper/
- Rich History: View past scans with dates, severity, and fix status
- Historical Fixes: Apply AI fixes from any previous scan
- Context Recovery: Full scan results and metadata preserved

$3

- Post-Scan Options: Choose to fix, save, or exit after each scan
- Smart Recommendations: Tailored advice based on your codebase
- Priority Actions: Clear guidance on what to fix first
- Progress Tracking: Real-time feedback during AI operations

---

🚀 Installation

$3

sh

npm install -g whisper-cli-ai

$3

sh

git clone https://github.com/Alinxus/whisper-cli.git

cd whisper

npm install

npm run build

npm link # (optional, to use as a global CLI)





---



🔑 Setup: Provide Your AI API Keys



1. Copy the example environment file:

sh

   cp .env.example .env



2. Open

.env

 and add your API keys for any of the following:

   -

GEMINI_API_KEY

 (Google Gemini)

   -

OPENAI_API_KEY

 (OpenAI)

   -

ANTHROPIC_API_KEY

 (Anthropic Claude)



You only need to provide the keys for the AI providers you want to use.



---



📂 Using .whisperignore



You can create a

.whisperignore file in your project root to exclude files and folders from being scanned by Whisper CLI. This works just like a .gitignore

 file.



- Why? To speed up scans and avoid analyzing files you don't care about (e.g.,

node_modules

, build output, logs, etc).

- How? Add one pattern per line. Example:



node_modules/

dist/

build/

*.log

.env

.git/

coverage/





- Default ignores: Whisper CLI already ignores common folders like

node_modules, .git, dist, etc. Your .whisperignore

 will be merged with these defaults.



---



🛠️ Usage



$3

sh

whisper scan [path] [options]



- Example:

sh

  whisper scan . --ai --model gpt-4o

$3

sh

whisper explain  [options]



- Example:

sh

  whisper explain src/index.js --model gemini-1.5-pro

$3

sh

whisper fix [path] [options]

$3

sh

whisper chat [options]

$3

sh

whisper guard --install





---



📋 Available Commands

-

scan

        — Scan code for vulnerabilities and improvements

-

explain

     — Explain code with AI

-

fix

         — Suggest and auto-fix issues

-

chat

        — Interactive AI chat mode

-

guard

       — Git pre-commit security guard

-

config

      — Manage CLI configuration

-

plugin

      — Manage CLI plugins

-

history

     — View local chat and scan history

-

update

      — Update the CLI

-

doctor

      — Diagnose and fix common issues



> Note: There are no

auth, analytics

, or backend commands. Everything runs locally and securely.



---



🧑‍💻 Open Source & Contributing



We welcome contributions! To get started:



1. Fork this repo and clone it locally.

2. Install dependencies:

npm install



3. Make your changes and add tests if needed.

4. Open a pull request with a clear description.



$3

- The CLI entry point is in

bin/whisper.js

.

- Main logic is in

lib/

.

- Backend code (in

backend/

) is provided as a template and is not required for CLI use.



---



🙋 FAQ



Q: Do I need to sign up or log in?

> No. Just provide your own AI API keys in

.env`.

Q: Is my code sent to any backend?
> No. All analysis is done locally and only sent to the AI APIs you configure.

Q: Can I use this for commercial or team projects?
> Yes! Just provide your own API keys and use it anywhere.

---

📣 License

MIT License. See LICENSE for details.

---

Happy coding and stay secure!

🛡️ Whisper CLI - AI Security Intelligence

✨ Key Features

$3

🚀 Installation

$3

sh

npm install -g whisper-cli-ai

$3

sh

git clone https://github.com/Alinxus/whisper-cli.git

cd whisper

npm install

npm run build

npm link # (optional, to use as a global CLI)





---



🔑 Setup: Provide Your AI API Keys



1. Copy the example environment file:

sh

   cp .env.example .env



2. Open

.env

 and add your API keys for any of the following:

   -

GEMINI_API_KEY

 (Google Gemini)

   -

OPENAI_API_KEY

 (OpenAI)

   -

ANTHROPIC_API_KEY

 (Anthropic Claude)



You only need to provide the keys for the AI providers you want to use.



---



📂 Using .whisperignore



You can create a

.whisperignore file in your project root to exclude files and folders from being scanned by Whisper CLI. This works just like a .gitignore

 file.



- Why? To speed up scans and avoid analyzing files you don't care about (e.g.,

node_modules

, build output, logs, etc).

- How? Add one pattern per line. Example:



node_modules/

dist/

build/

*.log

.env

.git/

coverage/





- Default ignores: Whisper CLI already ignores common folders like

node_modules, .git, dist, etc. Your .whisperignore

 will be merged with these defaults.



---



🛠️ Usage



$3

sh

whisper scan [path] [options]



- Example:

sh

  whisper scan . --ai --model gpt-4o

$3

sh

whisper explain  [options]



- Example:

sh

  whisper explain src/index.js --model gemini-1.5-pro

$3

sh

whisper fix [path] [options]

$3

sh

whisper chat [options]

$3

sh

whisper guard --install





---



📋 Available Commands

-

scan

        — Scan code for vulnerabilities and improvements

-

explain

     — Explain code with AI

-

fix

         — Suggest and auto-fix issues

-

chat

        — Interactive AI chat mode

-

guard

       — Git pre-commit security guard

-

config

      — Manage CLI configuration

-

plugin

      — Manage CLI plugins

-

history

     — View local chat and scan history

-

update

      — Update the CLI

-

doctor

      — Diagnose and fix common issues



> Note: There are no

auth, analytics

, or backend commands. Everything runs locally and securely.



---



🧑‍💻 Open Source & Contributing



We welcome contributions! To get started:



1. Fork this repo and clone it locally.

2. Install dependencies:

npm install



3. Make your changes and add tests if needed.

4. Open a pull request with a clear description.



$3

- The CLI entry point is in

bin/whisper.js

.

- Main logic is in

lib/

.

- Backend code (in

backend/

) is provided as a template and is not required for CLI use.



---



🙋 FAQ



Q: Do I need to sign up or log in?

> No. Just provide your own AI API keys in

📣 License

MIT License. See LICENSE for details.

---

Happy coding and stay secure!

whisper-ai

🛡️ Whisper CLI - AI Security Intelligence

✨ Key Features

$3

$3

$3

$3

🚀 Installation

$3

$3

🔑 Setup: Provide Your AI API Keys

📂 Using .whisperignore

🛠️ Usage

$3

$3

$3

$3

$3

📋 Available Commands

🧑‍💻 Open Source & Contributing

$3

🙋 FAQ

📣 License

whisper-ai

🛡️ Whisper CLI - AI Security Intelligence

✨ Key Features

$3

$3

$3

$3

🚀 Installation

$3

$3

🔑 Setup: Provide Your AI API Keys

📂 Using .whisperignore

🛠️ Usage

$3

$3

$3

$3

$3

📋 Available Commands

🧑‍💻 Open Source & Contributing

$3

🙋 FAQ

📣 License