Havuz

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, wi

Checks coding agents' edits as they work by enforcing mechanical guardrails for clean code.

Static-analysis-based dataset for training LLMs to detect, explain, and patch security vulnerabilities (Java, Korean/English annotations, ve

A static analysis linter for Stellar Soroban smart contracts to catch input-independent resource cost anti-patterns before deployment.

Rust Based Multi-language Static Analyser & Developer tools for the AI age.

Audits a repository for how ready it is for AI coding agents, and returns a prioritized fix backlog with evidence for every finding.

Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime

Jadart is a fast Flutter decompiler designed for Agents/Mobile Security Researchers.

An eraser against LLM-induced code & document entropy. Support if you like it!

Deterministic code quality gate for AI coding agents (Claude Code, Codex, pi): git hooks that block test tampering, hold the CRAP bar on cha

Deterministic tree-sitter + SQLite/FTS5 code knowledge graph for coding agents and developers: symbols, calls and dependencies over a CLI, a

"Review Ducktective" is an automated code review platform based on an LLM: it takes a diff as input and outputs structured findings with sev

Nuitka Assembly analyzer (as well as PyInstaller and other packagers) and native exe-files for extracting metadata, strings, modules, and st

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

Deterministic semantic linter and PR reviewer for IEC 61131-3 Structured Text. 80 checks across diff-based, static integrity, FB-instance, P

Find unused and dead Helm values: typos, keys a chart dropped, keys your AI agent made up, and the ones a chart upgrade silently breaks. CLI

A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.

Free open-source toolkit to understand, audit and rescue vibe-coded or legacy codebases: source-linked maps, team handoff, human-approved fi

Static security & correctness linter for Payload CMS. Zero-config, deterministic, ts-morph-based. Catches access-control gaps, unsafe Local

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

Deterministic security analysis for agent skill files.

seiso, proje dokümantasyonundaki Markdown dosyalarını tanımlı bir yazım ve yapı kuralına göre denetleyen bir CLI linter'dır.

Neden yükseliyor · AI tarafından üretilen dokümantasyonun doğruluğu ve coding agents için güvenilir bağlam ihtiyacı güncel bir sorun. Repo bir günlükken 74 yıldıza ulaşmış; bu ilk ilgiyi gösterir, ancak kalite veya benimseme kanıtı değildir. Son 28 günlük commit ve farklı yazar verisi ölçülmemiş.

iterleak, Go kodunda `iter.Pull` ve `iter.Pull2` çağrılarının `stop` fonksiyonu çağrılmadan kalıp goroutine sızıntısına yol açabileceği durumları bulan bir static analyzer.

Neden yükseliyor · 1 günlük bir repoda 30 yıldız ve son 28 günde 3 commit görünüyor. Zamanlama, Go iterator’larında gözden kaçabilen goroutine sızıntısı gibi somut bir hata sınıfına odaklanmasıyla uyumlu; ancak bu ilginin kesin nedenini veya kalıcı benimsemeyi mevcut verilerle doğrulamak mümkün değil.

droast - a dockerfile linter that actually has opinions 🔥

DianXing - AI-Driven End-to-End Code Security Auditing

ArchUnitPython is an architecture testing library. Specify and ensure architecture rules in your Python app. Easy setup and pipeline integra

发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析

codexqa: 11 local-first Agent Skills for Cursor, Claude Code, Codex & OpenClaw — change impact analysis, AI code review, defect scan, testca

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scorin

Program dependence graph and architecture/code-flow analysis for BEAM projects

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, expla

A practical Codex skill for evidence-backed repository health audits

Static analysis and state mutation auditor specifically designed for FrankenPHP's Worker Mode.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Policy-aware static taint analysis for detecting sensitive-data flows into LLM APIs.

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

A single-binary CLI tool that detects a software project's toolchain, configuration, and conventions, then outputs a structured report.

Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security a

Turn a security or performance exposure into a reviewable decision

Local, read-only audit for stale AGENTS.md, CLAUDE.md, and generic SKILL.md instructions.

CodeAutopsy is an AI-powered GitHub repository analyzer that automatically detects architecture patterns, execution flow, tech stack, and ke

SQL as a first-class language: formatting, linting, security auditing and pre-commit hooks for your .sql files, plus type-safe code generati

MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and chang

Semantic code intelligence MCP server for Claude Code - project maps, symbol search, impact analysis, and more

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

The 10-second codebase tour. Understand any repo in one command.

Evidence-driven Java security review workbench

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero dep

Static analysis and health checks for dbt projects.

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations