Havuz

Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.

Local, read-only audit for stale AGENTS.md, CLAUDE.md, and generic SKILL.md instructions.

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

Find and repair substance defects in AI-assisted prose, code, docs, and agent output. Reports defects, never authorship. Structural tests ov

A pure-Python reachability and skeletonization layer that decides what a coding agent actually sees before a request reaches the API.

Verified AI dependency migrations. Finds which of your lines a version bump actually breaks, fixes them, and proves the result still compile

iterleak, Go kodunda `iter.Pull` ve `iter.Pull2` çağrılarının `stop` fonksiyonu çağrılmadan kalıp goroutine sızıntısına yol açabileceği durumları bulan bir static analyzer.

Neden yükseliyor · 1 günlük bir repoda 30 yıldız ve son 28 günde 3 commit görünüyor. Zamanlama, Go iterator’larında gözden kaçabilen goroutine sızıntısı gibi somut bir hata sınıfına odaklanmasıyla uyumlu; ancak bu ilginin kesin nedenini veya kalıcı benimsemeyi mevcut verilerle doğrulamak mümkün değil.

Language-agnostic code navigation CLI powered by tree-sitter

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Framework-aware code intelligence MCP server — 91 framework integrations, 81 languages, 72.7% fewer input tokens to review a pull request, c

Program dependence graph and architecture/code-flow analysis for BEAM projects

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, expla

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

Static decompiler, deobfuscator, and unpacker for reverse engineering and malware analysis: Python decompiler (3.8-3.15), PyInstaller extrac

Agent skills for fallow. They teach coding agents (Claude Code, Codex, Cursor, and others) to check health, complexity, duplication, archite

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.

Static analysis and state mutation auditor specifically designed for FrankenPHP's Worker Mode.

Watch for bugs like a hawk! gohawk is a set of static analyzers for Go, focused on concurrency and resource-lifetime bugs.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Policy-aware static taint analysis for detecting sensitive-data flows into LLM APIs.

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

Predict the silent integration traps an AI agent would ship (zero-revenue configs, auth bypasses, immutable wrong choices) — then enforce, i

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Per-entry-point, navigable call-graph visualizations of Solidity repositories — for Web3 security auditors.

A single-binary CLI tool that detects a software project's toolchain, configuration, and conventions, then outputs a structured report.

The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, a

Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security a

Turn a security or performance exposure into a reviewable decision

CodeAutopsy is an AI-powered GitHub repository analyzer that automatically detects architecture patterns, execution flow, tech stack, and ke

SQL as a first-class language: formatting, linting, security auditing and pre-commit hooks for your .sql files, plus type-safe code generati

MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and chang

Semantic code intelligence MCP server for Claude Code - project maps, symbol search, impact analysis, and more

The 10-second codebase tour. Understand any repo in one command.

Excel VBA integration for VS Code - Tree View / Full Direct VBA Read+Write / LiveShare Compatible / Direct Agentic AI Integrations

Evidence-driven Java security review workbench

Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostic

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessmen

Code review via the change impact measure

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Static analysis and health checks for dbt projects.

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

🇺🇦🇵🇱 A static analysis tool for OpenTelemetry Collector configurations. Built on OPA/Rego, it validates your pipelines, receivers, processor

Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rus

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CI

PE/ELF x86/x64 CFG extractor

Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, via MCP.

Is your CLI ready for AI agents? Automated checks to ensure optimum agentic CLI use: don't block agents, don't waste tokens, ensure safe use

Help your agents find the smoking gun they're looking for. Optimization evidence for agents: find complexity hotspots.

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero dep