Havuz

fallow for Neovim — see your unused code, dups, and health in a native split

AI Powered Reverse Engineering Tool

Find unused and dead Helm values: typos, keys a chart dropped, keys your AI agent made up, and the ones a chart upgrade silently breaks. CLI

Paste a URL, find out something true about the site. Three URL-only readings on one page: Slopmeter scores how much of it is still the templ

Static security scanner for npm/PyPI packages, MCP servers, agent skills and repos. Runs locally, never runs the code, no LLM. CLI, Claude C

Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.

FSharp refactoring tool - The tool clarifies the (agent-generated or old) code's intent, reduces non-alphanumeric noise, and uses built-in .

Free open-source toolkit to understand, audit and rescue vibe-coded or legacy codebases: source-linked maps, team handoff, human-approved fi

路由器品牌插件！[BroTech] Router enhancement script for Xiaomi, ASUS, HUAWEI & TP-Link. Built for network geeks! Rebuilds dashboards with high-preci

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

Static ROS 2 architecture analysis, visualization, auditing, and CI policy enforcement for Python and C++ workspaces.

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

MIT-licensed code knowledge graph: index any source repo into a queryable graph of symbols, call chains and blast radius — with wiki generat

A living architecture map for any codebase, any language, any coding agent. See what every change does to the structure, and stop it crossin

Static, no-execution security checks for Hermes Agent plugins

Static security & correctness linter for Payload CMS. Zero-config, deterministic, ts-morph-based. Catches access-control gaps, unsafe Local

Gradual effect, contract, async-safety, and temporal checking for existing TypeScript.

Multi-language cognitive complexity linter, as a single static binary

零依赖的本地 APK/AAR/DEX 结构索引 + MCP Server。17 个工具，为 Xposed 模块开发提供静态反查。

企业自托管 AI Code Review Agent ，一键自动分析 GitLab MR 与 Push，并回填总评和行内 Discussion。

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

Safely run untrusted repos (fake-interview malware, infostealers, RATs) in a locked-down, ephemeral container. No host secrets reachable, ne

Fast iOS decompiler & Mach-O disassembler in Rust — arm64, Objective-C class-dump, Swift metadata, and a native desktop GUI. Reads .ipa/App

Deterministic security analysis for agent skill files.

Local code-intelligence pipeline for AI coding agents: architecture maps, hotspots, change impact, and structural regression gates before th

Deterministic Git & AST change intelligence engine and Model Context Protocol (MCP) server. Detects breaking changes, maps caller blast radi

Free, Apache-2.0 GenAI scanning for eight EU regulations. Download the scanner and models, then scan offline, including in air-gapped enviro

Structural code intelligence for DeepSeek Harness (dsh) — gives the agent codegraph and codegraph_index tools to find where a symbol is decl

Local AI security reviews with evidence, severity, and a review UI.

🩺 Zero-intrusion runtime diagnostic and architectural analyzer for Spring Boot. Automatically detects cyclic dependencies, proxy overheads,

Agent-ready CLI for static page inspection, search triage, and browser handoff.

Measures how much code AI coding agents add, from patches benchmarks already publish

Nephilex is an open-source AI Security Engineer that analyzes repositories, detects vulnerabilities, validates risks, explains findings, gen

Zero-G Reverse Engineering Anything & Verified Safe Rust Reconstruction for Gemini 4 Argon + Google Antigravity 2.0 (4-Mount Recon Kits, Who

Deterministic code-graph (GraphRAG) over your repo for LLM agents — local-first, git-native, zero-infra, served via MCP. Python, TS/JS, Rust

Pi extension that brings Fallow codebase intelligence into Pi as an agent tool and slash command.

NEXUS REDFOX — Local-first code intelligence and security analysis platform for developers and security researchers.

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Local-first repository context for coding agents: codegraph, cited project knowledge, change impact, and evidence-backed workflows.

Obsidian Graph View, but for source code — scan a JS/TS, HTML/CSS, Python, Ruby, Rust or Shopify Liquid project into a dependency graph and

Succeeded by SAUR: [https://github.com/PicasoTheDeal/SAUR](https://github.com/PicasoTheDeal/SAUR)

Normalize Tailwinds. A zero-config CLI and GitHub Action that finds bloated Tailwind utility classes and rewrites them into their short, can

Static secret scanner for source trees — regex rules, entropy scoring, and SARIF output for CI pipelines.

AI-powered vulnerability triage platform for Python projects. KIRTA combines SBOM, SCA, static code analysis, call maps, and AI explanations

Spring Boot + MyBatis 框架感知代码地图：静态分析调用链/SQL/事务/实体影响面，通过 MCP 喂给 AI 编程工具（Trae/Cursor/Claude Code），省 token、防幻觉

Static file analyzer for malware triage — hashing, binary headers, entropy, signature rules, and IOC matching.

Reproducible research on the persistence and recurrence of security misconfigurations in public Terraform repositories.