Havuz

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-

Rust-native reverse-engineering workspace for SLEIGH lifting, semantics-first decompilation, emulation, and validated binary-to-source recon

REA (Reverse Engineer Anything) in Docker: one image per analysis engine (Ghidra / Hopper / IDA) with a full reverse-engineering toolchain,

路由器品牌插件！[BroTech] Router enhancement script for Xiaomi, ASUS, HUAWEI & TP-Link. Built for network geeks! Rebuilds dashboards with high-preci

Semia, security audit for AI agent skills.

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Normify · DSH 插件：把项目架构写成归一化的分形模块树，三层校验（写时 / 校验 / 冻结回执）、30 个 normify_* 工具 + normify-gen 技能，一键渲染单文件交互式架构图；支持伴随式开发（change_open → brief → check

Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.

Excel VBA integration for VS Code - Tree View / Full Direct VBA Read+Write / LiveShare Compatible / Direct Agentic AI Integrations

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Find and repair substance defects in AI-assisted prose, code, docs, and agent output. Reports defects, never authorship. Structural tests ov

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Architectural linting for Swift developers and coding agents

graf is graphify, rebuilt properly in rust: 1000x faster search, 89x faster updates, and one native binary.

Контроль качества 1С-разработки для Claude Code: стандарты, принципы ООП и паттерны, XML метаданных, блокирующие гейты и проверяемый след пр

Specs your AI agent can't ignore. A deterministic compiler that turns your rules into checks: no AI inside, same input, same verdict. Rust ·

TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, S

Hybrid: a Go superset with compiler-enforced ownership & sendability. Add a .hy file, get plain readable Go. If you know Go, you already kno

Multi-language static analysis for agents, editors, and large repositories.

Ontology-driven codebase indexer and query service. Parses C#, TypeScript/JS, Go, Python, and SQL into an embedded graph database. Exposes M

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Static, no-execution security checks for Hermes Agent plugins

Multi-language cognitive complexity linter, as a single static binary

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Deterministic UI audits for shadcn apps, built for your terminal, your CI, and your AI agent.

Deterministic textlint rules and CLI for catching prose slop in English Markdown.

Repo dependency analyzer with **blast-radius impact scoring** for AI-assisted development.

Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, imp

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]

Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostic

Code review via the change impact measure

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessmen

A pure-Python reachability and skeletonization layer that decides what a coding agent actually sees before a request reaches the API.

Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rus

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CI

Is your CLI ready for AI agents? Automated checks to ensure optimum agentic CLI use: don't block agents, don't waste tokens, ensure safe use

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

A statistical code analyzer built from your repository's history.

Scan your ROS2 workspace and visualize node topology as an interactive graph. No running system needed.

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Tamper-resistant regression gate for AI coding-agent instructions—AGENTS.md, CLAUDE.md, Cursor, Copilot, Gemini, and more.

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

Audits the .claude/ ecosystem — skills, commands, hooks, agents, settings, plugins, memory — for dead references, weak triggers, token bloat

Static source analysis that generates deterministic Claude Code documentation ecosystems — no LLM guessing, only code-confirmed facts.

Review code changes by what they do, and learn the concepts behind them.

Get your repo ready for AI.