// sixthwall for Windsurf

Security scanning for Windsurf projects

Windsurf's Cascade agent can build a whole feature in one go. SixthWall checks what it produced for the mistakes AI-generated code most often makes, and gives you a fix to paste back.

Three steps

  1. 01

    Run init in your project

    Installs the pre-commit hook, writes a config file and runs your first scan.

    npx @sixthwall/cli init
  2. 02

    Scan after each Cascade run

    Run a scan when Cascade finishes, or use watch mode to rescan on save.

    npx @sixthwall/cli scan
  3. 03

    Paste the fix back into Cascade

    Every finding includes a prompt written for an AI tool. Paste it into Cascade and review the change.

What it looks for

The same rules run for every project, whatever tool wrote the code. These are the most serious ones. See all rules.

Questions

Does my code leave my machine?

No. The scanner runs locally, makes no network calls during a scan and needs no account. The only download is the scanner itself.

Is it free?

Yes. The editor scanner, the Claude Code integration, the pre-commit hook and the GitHub Action are free with no limits.