Havuz

The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]

Predict the silent integration traps an AI agent would ship (zero-revenue configs, auth bypasses, immutable wrong choices) — then enforce, i

Interactive static pattern discovery tool to locate structures from frequent patterns

Контроль качества 1С-разработки для Claude Code: стандарты, принципы ООП и паттерны, XML метаданных, блокирующие гейты и проверяемый след пр

Turn a public GitHub repository into an interactive software architecture graph. Static analysis, flow tracing, analytics. MIT licensed.

Find unused and dead Helm values: typos, keys a chart dropped, keys your AI agent made up, and the ones a chart upgrade silently breaks. CLI

Lint CSS cascade layers across a whole project — contradictory order between files, silent name merges, unlayered rules winning.

Flag ATTACH DATABASE footguns — cross-database atomicity, alias shadowing, ambiguous unqualified tables.

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

Agent Reliability Analyzer: deterministic scanner that finds and fixes AI agent reliability failures

Deterministic code quality gate for AI coding agents (Claude Code, Codex, pi): git hooks that block test tampering, hold the CRAP bar on cha

ArchUnitRuby is an architecture testing library. Specify and ensure architecture rules in your Ruby app. Easy setup and pipeline integration

A PHPStan extension for analysis of Laravel applications and packages.

PE/ELF x86/x64 CFG extractor

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

The 10-second codebase tour. Understand any repo in one command.

Static analysis for Sierra adventure games: finds softlocks by abstract interpretation of decompiled SCI scripts, derives and verifies guard

Static Ansible linting in Go: the 38 ansible-lint rules decidable from YAML alone, byte-for-byte pep8 output, no Ansible runtime.

Per-entry-point, navigable call-graph visualizations of Solidity repositories — for Web3 security auditors.

The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, a

A tool that replaces everything that can be deterministic in repository work: search, symbols, callers, task scope, history, review and Git

Static analysis for Redis Lua scripts — cluster-unsafe key access, unbounded loops, sandbox violations.

Excel VBA integration for VS Code - Tree View / Full Direct VBA Read+Write / LiveShare Compatible / Direct Agentic AI Integrations

MIT-licensed code knowledge graph: index any source repo into a queryable graph of symbols, call chains and blast radius — with wiki generat

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, via MCP.

Static-analysis-based dataset for training LLMs to detect, explain, and patch security vulnerabilities (Java, Korean/English annotations, ve

Static analysis and health checks for dbt projects.

Get your repo ready for AI.

A living architecture map for any codebase, any language, any coding agent. See what every change does to the structure, and stop it crossin

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Architecture-aware code search, dependency graphs, and impact analysis for Python, TypeScript, Rust, C#, Java, Go, Ruby, Rails, Free Pascal,

Android Studio plugin that catches common Kotlin coroutine and Flow mistakes (leaks, ANRs, flaky tests) with context-aware quick fixes

Browser-based, syntax-aware code comment stripper that removes comments from source code while preserving strings, URLs, template literals,

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.

Jadart is a fast Flutter decompiler designed for Agents/Mobile Security Researchers.

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Audits a repository for how ready it is for AI coding agents, and returns a prioritized fix backlog with evidence for every finding.

A single-binary CLI tool that detects a software project's toolchain, configuration, and conventions, then outputs a structured report.

Semantic code intelligence MCP server for Claude Code - project maps, symbol search, impact analysis, and more

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero dep

CodeAutopsy is an AI-powered GitHub repository analyzer that automatically detects architecture patterns, execution flow, tech stack, and ke

Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rus

SQL as a first-class language: formatting, linting, security auditing and pre-commit hooks for your .sql files, plus type-safe code generati

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidenc

An architectural audit where a finding is admissible only once its cost is measured from git history. A doctrine for coding agents plus a st

MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and chang