{"_id":"16-eyes","_rev":"8-34247f07ee1d85d2403dc2063e517c8e","name":"16-eyes","dist-tags":{"latest":"1.2.2"},"versions":{"0.1.0":{"name":"16-eyes","version":"0.1.0","keywords":["claude-code","claude","security-audit","security-review","static-analysis","vulnerability-scan","ai-agent","skill"],"license":"MIT","_id":"16-eyes@0.1.0","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"homepage":"https://github.com/kigiela/16-eyes#readme","bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"bin":{"16-eyes":"bin/cli.js"},"dist":{"shasum":"61d63798e7b451a94916f17c757b412a8d667d5a","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-0.1.0.tgz","fileCount":19,"integrity":"sha512-8kBtnZz8lq3RVcsNGAzv4ZcEO0Jq/8h3df4tDt4CAVcxeP+lUcgAKAiLVi9FGVfl4yLcHV5rIgs1BcUbpOM8CQ==","signatures":[{"sig":"MEQCIFVvcAH3rn44vE8l9sV3Db5U5WbvixbqanmVOaMYSbVMAiBCBVgXxenyp/TnhjuEnVX+IUDTEghrjlW6q3o8e4Ao6A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":70800},"type":"module","engines":{"node":">=18"},"gitHead":"58bfc85314dc01172ebb024cb17681827f48cc50","_npmUser":{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"},"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"11.10.0","description":"Full-repository security audits for Claude Code — profile the repo, design custom investigation lenses, run them, verify every finding, adversarially review high-impact ones. Install the skill, then use /16-eyes init, /16-eyes audit, /16-eyes fix inside C","directories":{},"_nodeVersion":"24.4.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/16-eyes_0.1.0_1784214915931_0.03173870090038","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"16-eyes","version":"1.0.0","keywords":["claude-code","claude","gemini-cli","cursor","github-copilot","security-audit","security-review","static-analysis","vulnerability-scan","ai-agent","skill"],"license":"MIT","_id":"16-eyes@1.0.0","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"homepage":"https://github.com/kigiela/16-eyes#readme","bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"bin":{"16-eyes":"bin/cli.js"},"dist":{"shasum":"31226e999db1e07e4e345950dccc7189f34d748c","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-1.0.0.tgz","fileCount":48,"integrity":"sha512-syleF4JYpCPcFjNacqWCSaX8ewl5LqV/2ONfUI7PJ9K0nnso7ByO4WAcYA9Y4q6ag7/6VSJnvMmJju481Ol4EQ==","signatures":[{"sig":"MEUCIBRvgylqnpA4cUAhvEW0664qx2GJ33cJr/pp/0GiGFBZAiEAisNo6jhYFiHKAOgdM6jqgdd+XmSBBsDt88ZYJiAyleA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/16-eyes@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":221759},"type":"module","engines":{"node":">=18"},"gitHead":"535d6b35ee9e460a900efa8faf66cf327678be72","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:0ed4b232-5a63-4406-b014-52c83ef7ec76"}},"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"12.0.1","description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","directories":{},"_nodeVersion":"22.23.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/16-eyes_1.0.0_1784222817732_0.3137431396951875","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"16-eyes","version":"1.0.1","keywords":["claude-code","claude","gemini-cli","cursor","github-copilot","security-audit","security-review","static-analysis","vulnerability-scan","ai-agent","skill"],"license":"MIT","_id":"16-eyes@1.0.1","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"homepage":"https://github.com/kigiela/16-eyes#readme","bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"bin":{"16-eyes":"bin/cli.js"},"dist":{"shasum":"6601cb5f52532f4d317f627b6239ecb44a86f3fd","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-1.0.1.tgz","fileCount":48,"integrity":"sha512-Hby4JmWPo/a/jAApMBwbfUvpkrWI/pQb4IBN2o8feAd3LF8q76M61+HwlJ4+DHoAeXNOjBRiF75uoepBaqO/Uw==","signatures":[{"sig":"MEQCIFiY3He2wsBerALAAeFV24Ohbz/NIMLdQjZx7esfZBDfAiB1jOm7/8Bn4FEZfyO8kmor9mX0KStZNuGF0CWqcZaMxw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/16-eyes@1.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":222312},"type":"module","engines":{"node":">=18"},"gitHead":"695b078a6a5c5e23857dc4be3a347869b7c5eb16","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:0ed4b232-5a63-4406-b014-52c83ef7ec76"}},"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"12.0.1","description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","directories":{},"_nodeVersion":"22.23.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/16-eyes_1.0.1_1784235018095_0.2169596855955307","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"16-eyes","version":"1.1.0","keywords":["claude-code","claude","gemini-cli","cursor","github-copilot","security-audit","security-review","static-analysis","vulnerability-scan","ai-agent","skill"],"license":"MIT","_id":"16-eyes@1.1.0","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"homepage":"https://github.com/kigiela/16-eyes#readme","bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"bin":{"16-eyes":"bin/cli.js"},"dist":{"shasum":"c489ed5602707cad24ab4df5672d618ce870af02","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-1.1.0.tgz","fileCount":52,"integrity":"sha512-R4eZZwONmABBahfjGa8bp1L4DwMeogmJRD++Dz01selI2dRx5x8L7jEswwG1ejjKIbwiyDTV9xDTRFIqFMqI7w==","signatures":[{"sig":"MEUCIQCJsvfBafMYc9FxBu0AXzECSWloLll7ztkxI3yIMzYQCAIgBrEqZIt68NuL/RUA/7aY0O1+q3z9/Ed/TlfW2zqelv8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/16-eyes@1.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":234581},"type":"module","engines":{"node":">=18"},"gitHead":"d4893ed1afd60404891df1a82427eb846882fa66","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:0ed4b232-5a63-4406-b014-52c83ef7ec76"}},"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"12.0.1","description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","directories":{},"_nodeVersion":"22.23.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/16-eyes_1.1.0_1784238468344_0.39922310378704395","host":"s3://npm-registry-packages-npm-production"}},"1.1.1":{"name":"16-eyes","version":"1.1.1","keywords":["claude-code","claude","gemini-cli","cursor","github-copilot","security-audit","security-review","static-analysis","vulnerability-scan","ai-agent","skill"],"license":"MIT","_id":"16-eyes@1.1.1","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"homepage":"https://github.com/kigiela/16-eyes#readme","bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"bin":{"16-eyes":"bin/cli.js"},"dist":{"shasum":"cb96039c5cde208f84d422c2bf53eb54f65f850f","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-1.1.1.tgz","fileCount":52,"integrity":"sha512-CRZntcjnpberZbvchew8u0O9zDW3ff2lxobGHPjAGmWmu3y/GnPqXI/za5DaMu0+as+Pu1nA+SNu/oI5JA7EYw==","signatures":[{"sig":"MEUCIQDbuUtswgS0jY8pPIP8DfjDPeRpTiDgpUqaZ+syz68/ogIgPk6d1R1+5SpQ7PWiYW5XtDEyTWDT4y8FiIdmldVx60Q=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/16-eyes@1.1.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":234581},"type":"module","engines":{"node":">=18"},"gitHead":"7f11e7cc9c0778d0f18b9c22505a4af85cf59214","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:0ed4b232-5a63-4406-b014-52c83ef7ec76"}},"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"12.0.1","description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","directories":{},"_nodeVersion":"22.23.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/16-eyes_1.1.1_1784238882983_0.3106835754711248","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"16-eyes","version":"1.2.0","keywords":["claude-code","claude","claude-skill","claude-code-plugin","gemini-cli","cursor","github-copilot","github-action","security-audit","security-review","sast","code-review","static-analysis","vulnerability-scan","ai-agent","agent-skill","skill"],"license":"MIT","_id":"16-eyes@1.2.0","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"homepage":"https://github.com/kigiela/16-eyes#readme","bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"bin":{"16-eyes":"bin/cli.js"},"dist":{"shasum":"7269ba9d98262f40d63a3ad4e3dbf4885802e7d4","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-1.2.0.tgz","fileCount":52,"integrity":"sha512-e52+GlXeTiUXPxE7CK/WmlA9xkGaosVgCGUNRW3laA9U6VMX8I3/sLHoWY+H1S/PiSErAsV9VxEfdK774X6OqQ==","signatures":[{"sig":"MEUCIQCXEc5ghZpr2/OnNp9MtoyJreGGmO0CwZXHfZ9QtYWLgAIgTyU9AIgiFdJjs00ylBhizOIXaIK5cCbGr5AT7CwS1FU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/16-eyes@1.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":238781},"type":"module","engines":{"node":">=18"},"gitHead":"f1b205df15de17aeef458399442d35e233f95a34","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:0ed4b232-5a63-4406-b014-52c83ef7ec76"}},"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"12.0.1","description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","directories":{},"_nodeVersion":"22.23.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/16-eyes_1.2.0_1785314450398_0.3644227405851712","host":"s3://npm-registry-packages-npm-production"}},"1.2.1":{"name":"16-eyes","version":"1.2.1","keywords":["claude-code","claude","claude-skill","claude-code-plugin","gemini-cli","cursor","github-copilot","github-action","security-audit","security-review","sast","code-review","static-analysis","vulnerability-scan","ai-agent","agent-skill","skill"],"license":"MIT","_id":"16-eyes@1.2.1","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"homepage":"https://github.com/kigiela/16-eyes#readme","bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"bin":{"16-eyes":"bin/cli.js"},"dist":{"shasum":"4e48429d6fa7e1956fb2f2200453cc2fe03cbe1b","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-1.2.1.tgz","fileCount":52,"integrity":"sha512-lCIr9Qxsrc3n0R+Z4rGIBvcAXvJuTzhZBzjsqlCD0Wb4flhSP2jPgJphKMqqmtyhJtFbNGJW8Ix2i6PvxAC46A==","signatures":[{"sig":"MEUCIDnplwDCdDBSdWSjUJq3k/vxeUNudF4I1Mf2TXq0dQ5IAiEA3ELbIEQgegvzr+7uoWjsSZtOXpBKD9RCeqw+Cs6uHxM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIA8O0/FjQNckRIIIuF8vctovSSzIDqcQ+kdkn1Y1RcufAiEA97L0ioUbUJoIdu6Kg/lWv/vKQ1Jsyh1m2EBHSmvntm0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/16-eyes@1.2.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":249365},"type":"module","engines":{"node":">=18"},"gitHead":"919a91c1de406dad3f1b2ee05c3f933905be340a","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:0ed4b232-5a63-4406-b014-52c83ef7ec76"}},"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"12.0.2","description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","directories":{},"_nodeVersion":"22.23.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/16-eyes_1.2.1_1789775744414_0.09948247318704251","host":"s3://npm-registry-packages-npm-production"}},"1.2.2":{"_id":"16-eyes@1.2.2","bin":{"16-eyes":"bin/cli.js"},"bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"dist":{"shasum":"75762218d6d9b2781bddbf31e08ccf9cec926123","tarball":"https://registry.npmjs.org/16-eyes/-/16-eyes-1.2.2.tgz","fileCount":52,"integrity":"sha512-3eToXyJ3hgWs9Oe1GCwplfqYLhNS/iXFn8ICsgaOAUjAap+oya3wTEpMHK4SU980yGseYtmZJ1epeMpWEqoLaw==","signatures":[{"sig":"MEYCIQDmq7VWR5uIFZFvSQvZeqJTzkIO2p3w4VNQPdMSONMzAwIhALpMcHRadgQT+eUT64iW6OhOK+TyWvvFGSDzR+iOvHlC","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQDPZ7/nM8Ff29PWtF0sxSa2ivTHCCi22LScLmO7CwPY+QIhANkxtXVXhmH/1iZ13uUhUl71ciypAkQ1/KrminNDhZ6F"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/16-eyes@1.2.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":254260},"name":"16-eyes","type":"module","engines":{"node":">=18"},"gitHead":"261d2b381b3ff6e819456d4c9aa40b9dff56b7d3","license":"MIT","version":"1.2.2","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:0ed4b232-5a63-4406-b014-52c83ef7ec76"}},"homepage":"https://github.com/kigiela/16-eyes#readme","keywords":["claude-code","claude","claude-skill","claude-code-plugin","gemini-cli","cursor","github-copilot","github-action","security-audit","security-review","sast","code-review","static-analysis","vulnerability-scan","ai-agent","agent-skill","skill"],"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"_npmVersion":"12.0.2","description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","directories":{},"maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"_nodeVersion":"22.23.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/16-eyes_1.2.2_1789782692120_0.9040990015117936"}}},"time":{"created":"2026-07-16T15:15:15.849Z","modified":"2026-09-19T01:51:32.552Z","0.1.0":"2026-07-16T15:15:16.062Z","1.0.0":"2026-07-16T17:26:57.877Z","1.0.1":"2026-07-16T20:50:18.251Z","1.1.0":"2026-07-16T21:47:48.484Z","1.1.1":"2026-07-16T21:54:43.122Z","1.2.0":"2026-07-29T08:40:50.537Z","1.2.1":"2026-09-18T23:55:44.505Z","1.2.2":"2026-09-19T01:51:32.212Z"},"bugs":{"url":"https://github.com/kigiela/16-eyes/issues"},"license":"MIT","homepage":"https://github.com/kigiela/16-eyes#readme","keywords":["claude-code","claude","claude-skill","claude-code-plugin","gemini-cli","cursor","github-copilot","github-action","security-audit","security-review","sast","code-review","static-analysis","vulnerability-scan","ai-agent","agent-skill","skill"],"repository":{"url":"git+https://github.com/kigiela/16-eyes.git","type":"git"},"description":"AI-driven security audits — full-repo or diff/PR-scoped — for Claude Code, Gemini CLI, Cursor, and GitHub Copilot. Profiles the repo, designs tailored investigation lenses, runs them, verifies every finding, adversarially reviews high-impact ones. Install","maintainers":[{"name":"mauriciokigiela","email":"mauricio@kigiela.com.br"}],"readme":"# 16 Eyes\n\n![16 Eyes](./assets/Background.png)\n\n**Auditorias de segurança orientadas por IA para [Claude Code](https://claude.com/claude-code),\n[Gemini CLI](https://geminicli.com/), [Cursor](https://cursor.com/) e\n[GitHub Copilot](https://github.com/features/copilot) — repositório inteiro ou\nescopado a diff/PR.**\n\n![Claude Code](https://img.shields.io/badge/Claude_Code-suportado-0F6E56)\n![Gemini CLI](https://img.shields.io/badge/Gemini_CLI-suportado-0F6E56)\n![Cursor](https://img.shields.io/badge/Cursor-suportado-0F6E56)\n![GitHub Copilot](https://img.shields.io/badge/GitHub_Copilot-suportado-0F6E56)\n\n![Como o 16 Eyes funciona](./assets/how-it-works-pt-br.png)\n\n> Dezesseis olhos independentes olham cada achado antes dele chegar no seu relatório: a\n> lente que o encontrou, um verificador cético que relê o código de verdade, e — pros\n> achados de impacto alto — vários revisores adversariais tentando ativamente derrubar o\n> achado. **Nada entra no relatório só na palavra de um agente.**\n\n![Demo do 16 Eyes](./assets/demo-pt-br.gif)\n\n<sub>[Vídeo em qualidade completa no YouTube](https://www.youtube.com/watch?v=Dkodk7A7q-k)</sub>\n\n*[Read in English](./README.md) · [Lee en español](./README.es.md)*\n\n## Por que isso existe\n\nFerramentas escopadas a diff (o `/security-review` nativo do Claude Code, a maioria dos\nscanners ligados no CI) fazem uma única passada sobre o que mudou e só enxergam o\nPR/branch atual. O `/16-eyes audit-diff` também é escopado a diff, mas roda as lentes\nsob medida do repo, verifica cada achado ceticamente e faz revisão adversarial dos de\nimpacto alto — um pipeline mais pesado e cético que um revisor de passada única, e uma\nboa opção pra plugar no CI. O `/16-eyes audit` vai além: varre o **repositório inteiro**,\nindependente do que mudou recentemente — uma vulnerabilidade parada no código há meses é\ninvisível pra qualquer ferramenta escopada a diff, `audit-diff` incluído. É um sweep\nprofundo, deliberado e ocasional, não algo pra rodar a cada commit.\n\nDiferente de uma checklist fixa, o 16 Eyes **perfila seu repo primeiro** (stack,\ndomínios, arquitetura) e só então **desenha o próprio plano de investigação** — um\nserviço pequeno ganha um punhado de lentes sob medida, um backend grande e\nmulti-domínio ganha bem mais — e em ambos os casos as lentes são sobre o que\n*realmente existe* no seu código, não uma lista genérica.\n\n## Instalação\n\n**Claude Code**, como plugin — o caminho mais rápido, sem precisar de npm/Node:\n\n```\n/plugin marketplace add kigiela/16-eyes\n/plugin install 16-eyes@16-eyes\n```\n\n**Qualquer uma das quatro ferramentas**, via npm:\n\n```bash\nnpx 16-eyes install\n```\n\nInstala o skill do Claude Code globalmente em `~/.claude/skills/user/16-eyes`. Use\n`--project` pra instalar no `.claude/skills/16-eyes` do repositório atual em vez disso.\nUma sessão nova do Claude Code é necessária depois — skills são descobertos no início da\nsessão, não no meio dela.\n\n```bash\nnpx 16-eyes update       # recopia a versão mais recente\nnpx 16-eyes uninstall    # remove o que foi instalado (nunca toca no .16-eyes/ próprio de um repo)\nnpx 16-eyes status       # mostra o que está instalado, e onde, em cada ferramenta\n```\n\nPra Gemini CLI, Cursor ou GitHub Copilot (em vez de, ou além do Claude Code), passe\n`--target`:\n\n```bash\nnpx 16-eyes install --target gemini    # → .gemini/commands + .gemini/agents\nnpx 16-eyes install --target cursor    # → .cursor/skills + .cursor/agents\nnpx 16-eyes install --target copilot   # → .github/agents + .github/prompts\nnpx 16-eyes install --target all       # todas as ferramentas de uma vez\n```\n\nEsses são sempre relativos ao projeto (dê `git add` e commit neles) — nenhuma dessas\nferramentas tem o conceito de skill global do Claude Code. Veja\n[Outras ferramentas](#outras-ferramentas) abaixo pra saber o que muda nelas.\n\n## Uso\n\nDentro do Claude Code, em qualquer repositório:\n\n```\n/16-eyes init         configura — detecta gates/exclusões/saída, desenha as lentes\n/16-eyes audit        roda todas as lentes no repositório inteiro\n/16-eyes audit-diff   o mesmo motor, escopado a um diff/PR\n/16-eyes fix          aplica os achados — os safe direto, os risky com sua confirmação\n```\n\n`init` desenha e persiste as lentes de investigação do repo — `audit` e `audit-diff`\nreaproveitam em vez de redesenhar do zero a cada execução. Se pular, qualquer um dos\ndois faz o bootstrap automático (sem perguntas, seguro em CI); rode explicitamente\nantes se quiser customizar padrões de exclusão, local de saída, profundidade, idioma, ou\nqual model as chamadas de subagente do pipeline usam, antes disso acontecer. `audit` é\nsomente leitura e pode levar alguns minutos (dezenas de\nchamadas de subagente) — esperado pra um sweep do repositório inteiro; `audit-diff` é\nbem mais barato por ser escopado a um diff. `fix` nunca commita nem dá push; sempre\ndeixa as mudanças na working tree pra você revisar.\n\n## Como funciona\n\n1. **Perfil e desenho de lentes** (`/16-eyes init`, uma vez) — um agente explora a\n   estrutura do repo e identifica a stack, o domínio, e os subsistemas específicos que\n   importam pra segurança (pagamentos, webhooks, auth, upload de arquivo, uso de LLM, o\n   que realmente se aplicar); um segundo agente, dado esse perfil, desenha uma lista de\n   lentes de investigação sob medida — pulando categorias que não se aplicam,\n   adicionando as específicas do repo que se aplicam. Persistido em\n   `.16-eyes/lenses.json`.\n2. **Lentes → verificação** (`audit`/`audit-diff`, a cada execução) — cada lente\n   persistida investiga de forma independente (no repo inteiro, ou escopada a um diff);\n   todo achado que ela levanta passa por uma reverificação cética independente contra o\n   código de verdade (não só a descrição do próprio achado).\n3. **Revisão adversarial** — achados classificados como impacto alto passam por uma\n   segunda rodada independente: vários revisores tentam, cada um, *derrubar* o achado.\n   Só sobrevive se a maioria não conseguir refutar.\n4. **Relatório** — os achados que sobrevivem são classificados `safe` (correção\n   mecânica, sem mudança de comportamento) ou `risky` (precisa de decisão humana),\n   escritos tanto como relatório markdown (`SECURITY_AUDIT_<data>.md` ou\n   `SECURITY_AUDIT_DIFF_<data>.md`) quanto um companheiro legível por máquina (`.json`,\n   consumido pelo `/16-eyes fix`).\n\nVeja a [Wiki](https://github.com/kigiela/16-eyes/wiki) pra um mergulho técnico mais\nprofundo: os guards exatos de verificação/revisão adversarial, como as categorias de\nlentes mapeiam pro OWASP Top 10:2025, o tradeoff entre auditoria full-repo vs. diff, e\nressalvas honestas.\n\n## Outras ferramentas\n\nGemini CLI, Cursor e GitHub Copilot têm cada um seu próprio adaptador enxuto em\n[`integrations/`](./integrations) (instalado via `--target`, veja acima), todos\ncompartilhando o mesmo `.16-eyes/config.json` / `.16-eyes/lenses.json` / relatórios que o\nClaude Code — rode `init` uma vez com qualquer uma das ferramentas e todas as outras\ninstaladas reaproveitam. A sintaxe de invocação muda conforme a convenção de cada\nferramenta:\n\n| | init | audit | audit-diff | fix |\n|---|---|---|---|---|\n| Claude Code | `/16-eyes init` | `/16-eyes audit` | `/16-eyes audit-diff` | `/16-eyes fix` |\n| Gemini CLI | `/16-eyes:init` | `/16-eyes:audit` | `/16-eyes:audit-diff` | `/16-eyes:fix` |\n| Cursor | `16-eyes-init` | `16-eyes-audit` | `16-eyes-audit-diff` | `16-eyes-fix` |\n| GitHub Copilot | `@16-eyes-init` | `@16-eyes-audit` | `@16-eyes-audit-diff` | `@16-eyes-fix` |\n\n<details>\n<summary><strong>Ressalva honesta sobre os adaptadores fora do Claude Code</strong></summary>\n\nA ferramenta `Workflow` do Claude Code roda um pipeline escrito-por-agente com chamadas\nvalidadas por JSON-schema — as etapas de fan-out, verificação e revisão adversarial são\nimpostas de fato, não só sugeridas. No momento desta escrita, Gemini CLI, Cursor e\nCopilot têm subagentes paralelos, mas nenhum tem essa capacidade de impor schema — os\nadaptadores deles pedem pra cada agente delegado retornar um bloco JSON e fazem o\nparsing, com as mesmas travas de corrupção/refutação escritas como instruções explícitas\nem vez de código imposto. É a mesma metodologia, com garantias um pouco mais fracas que\na versão Claude Code. O coding agent assíncrono do GitHub Copilot especificamente não\ntem equivalente a slash-command nenhum — ele depende do `AGENTS.md` (também instalado\npor `--target copilot`) pra ter um mínimo de contexto, em vez de um comando dedicado.\n\n</details>\n\n## CI\n\n`/16-eyes audit-diff` foi feito pra rodar em toda PR. Configuração mais simples, como\numa GitHub Action publicada:\n\n```yaml\n- uses: kigiela/16-eyes@v1\n  with:\n    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}\n```\n\nVeja [`docs/ci.md`](./docs/ci.md) pro panorama completo (só comentário por padrão,\nbloqueio de merge opcional, e a alternativa com o workflow bruto se quiser ver cada\npasso explicitamente).\n\n## Licença\n\nMIT — ver [LICENSE](./LICENSE). Também: [Política de Privacidade](./docs/privacy-policy.md) ·\n[Termos de Serviço](./docs/terms-of-service.md) ·\n[Disclosures de segurança e transparência](./docs/security-and-safety.md).\n","readmeFilename":"README.pt-BR.md"}