Havuz

Language-agnostic code navigation CLI powered by tree-sitter

Deterministic textlint rules and CLI for catching prose slop in English Markdown.

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Repo dependency analyzer with **blast-radius impact scoring** for AI-assisted development.

Automated quality checks that nudge AI coding agents toward better habits

codexqa: 11 local-first Agent Skills for Cursor, Claude Code, Codex & OpenClaw — change impact analysis, AI code review, defect scan, testca

Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, imp

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scorin

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

Program dependence graph and architecture/code-flow analysis for BEAM projects

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, expla

A practical Codex skill for evidence-backed repository health audits

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS,

Agent skills for fallow. They teach coding agents (Claude Code, Codex, Cursor, and others) to check health, complexity, duplication, archite

Static analysis and state mutation auditor specifically designed for FrankenPHP's Worker Mode.

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Normify · DSH 插件：把项目架构写成归一化的分形模块树，三层校验（写时 / 校验 / 冻结回执）、30 个 normify_* 工具 + normify-gen 技能，一键渲染单文件交互式架构图；支持伴随式开发（change_open → brief → check

Cheaper and better Greptile alternative runs on your own github actions.

Policy-aware static taint analysis for detecting sensitive-data flows into LLM APIs.

Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

TypeScript toolkit for Windows x64 native systems programming, memory manipulation, and process instrumentation.

Predict the silent integration traps an AI agent would ship (zero-revenue configs, auth bypasses, immutable wrong choices) — then enforce, i

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Per-entry-point, navigable call-graph visualizations of Solidity repositories — for Web3 security auditors.

A single-binary CLI tool that detects a software project's toolchain, configuration, and conventions, then outputs a structured report.

Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security a

Turn a security or performance exposure into a reviewable decision

Agent Reliability Analyzer: deterministic scanner that finds and fixes AI agent reliability failures

Local, evidence-based application security assessment engine and Claude Code plugin

Local, read-only audit for stale AGENTS.md, CLAUDE.md, and generic SKILL.md instructions.

CodeAutopsy is an AI-powered GitHub repository analyzer that automatically detects architecture patterns, execution flow, tech stack, and ke

SQL as a first-class language: formatting, linting, security auditing and pre-commit hooks for your .sql files, plus type-safe code generati

MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and chang

Semantic code intelligence MCP server for Claude Code - project maps, symbol search, impact analysis, and more

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

The 10-second codebase tour. Understand any repo in one command.

Evidence-driven Java security review workbench

Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostic

Code review via the change impact measure

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero dep

Static analysis and health checks for dbt projects.

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessmen

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

A pure-Python reachability and skeletonization layer that decides what a coding agent actually sees before a request reaches the API.

🇺🇦🇵🇱 A static analysis tool for OpenTelemetry Collector configurations. Built on OPA/Rego, it validates your pipelines, receivers, processor

Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rus

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CI