Havuz

手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes.

Runtime feature research for Black Desert x64: FOV unlock, render-scale supersampling (up to 400%), actor chams, and gathering ESP. Source,

Auditable code review skill for Claude Code and Codex: four independent probes, evidence-backed findings, and a JSON-derived merge gate.

TypeScript toolkit for Windows x64 native systems programming, memory manipulation, and process instrumentation.

Local, evidence-based application security assessment engine and Claude Code plugin

Heuristic Solidity/DeFi security review toolkit — flags suspicious patterns to review, backed by Foundry scenarios. Educational / authorized

Living docs for you and your AI assistant. VibeSequence reads your code and draws every route, command and handler as a zoomable sequence d

Architecture quality gate for polyglot codebases: declare components and allowed dependencies, fail the build on drift

Local-first code audit workbench for Opengrep. Scan locally, track findings across versions, verify fixes, and produce reproducible security

An opinionated, curated list of tools for enforcing software development standards: one recommended tool per job, with limits.

给 AI 生成代码做安全审阅的终端工具：410 条漏洞清单，20 条本地规则 + 模型逐条判定（带证据核实），看完 diff 再决定要不要写（Rust）

Free open-source toolkit to understand, audit and rescue vibe-coded or legacy codebases: source-linked maps, team handoff, human-approved fi

Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the

Static reverse engineering of untrusted files with verifiable, byte-anchored evidence. Open tools (Ghidra, JADX, LIEF, YARA-X, Babel) in loc

Agent dashboard runs reliability scans, skills, and network access probes.

Deterministic Git & AST change intelligence engine and Model Context Protocol (MCP) server. Detects breaking changes, maps caller blast radi

Recommend AI coding harness changes from repository context and coding signals, then distribute approved rules, skills, hooks and agents to

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

确定性取证 × 大模型定性 × Agent 反证复核的恶意代码审计智能体 · Deterministic forensics × LLM verdict × agent falsification for malicious-code audits

REA (Reverse Engineer Anything) in Docker: one image per analysis engine (Ghidra / Hopper / IDA) with a full reverse-engineering toolchain,

Zero-G Reverse Engineering Anything & Verified Safe Rust Reconstruction for Gemini 4 Argon + Google Antigravity 2.0 (4-Mount Recon Kits, Who

Hybrid: a Go superset with compiler-enforced ownership & sendability. Add a .hy file, get plain readable Go. If you know Go, you already kno

Find unused and dead Helm values: typos, keys a chart dropped, keys your AI agent made up, and the ones a chart upgrade silently breaks. CLI

Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Cod

Kotlin formatter and linter in Rust, drop-in ktfmt and ktlint (2.0 and 1.8) replacements with identical output.

Review code changes by what they do, and learn the concepts behind them.

Evidence-driven Java security review workbench

MIT-licensed code knowledge graph: index any source repo into a queryable graph of symbols, call chains and blast radius — with wiki generat

iterleak, Go kodunda `iter.Pull` ve `iter.Pull2` çağrılarının `stop` fonksiyonu çağrılmadan kalıp goroutine sızıntısına yol açabileceği durumları bulan bir static analyzer.

Neden yükseliyor · 1 günlük bir repoda 30 yıldız ve son 28 günde 3 commit görünüyor. Zamanlama, Go iterator’larında gözden kaçabilen goroutine sızıntısı gibi somut bir hata sınıfına odaklanmasıyla uyumlu; ancak bu ilginin kesin nedenini veya kalıcı benimsemeyi mevcut verilerle doğrulamak mümkün değil.

Local-first static analysis for EF Core: finds performance and correctness problems (SaveChanges in loops, unbounded queries, cartesian Incl

seiso, proje dokümantasyonundaki Markdown dosyalarını tanımlı bir yazım ve yapı kuralına göre denetleyen bir CLI linter'dır.

Neden yükseliyor · AI tarafından üretilen dokümantasyonun doğruluğu ve coding agents için güvenilir bağlam ihtiyacı güncel bir sorun. Repo bir günlükken 74 yıldıza ulaşmış; bu ilk ilgiyi gösterir, ancak kalite veya benimseme kanıtı değildir. Son 28 günlük commit ve farklı yazar verisi ölçülmemiş.

Security scanner for MCP servers, source trees, and packages, with explicit findings and coverage reporting.

A living architecture map for any codebase, any language, any coding agent. See what every change does to the structure, and stop it crossin

Lint CSS cascade layers across a whole project — contradictory order between files, silent name merges, unlayered rules winning.

Flag ATTACH DATABASE footguns — cross-database atomicity, alias shadowing, ambiguous unqualified tables.

Static analysis for Redis Lua scripts — cluster-unsafe key access, unbounded loops, sandbox violations.

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Deterministic code quality gate for AI coding agents (Claude Code, Codex, pi): git hooks that block test tampering, hold the CRAP bar on cha

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Measures how much code AI coding agents add, from patches benchmarks already publish

Multi-language cognitive complexity linter, as a single static binary

Android DEX → Java decompiler in Rust — quality-first: javac-verified output, exact semantic-preserving simplification (cure), full apps in

A codebase scanner that helps you not run malicous code

Experimental macOS Apple Silicon first recompiler of PS4 programs

AI-powered desktop app for migrating Python projects to Rust. Supports multiple LLM providers (OpenAI, Anthropic, Ollama), includes 300+ lib

perch, Jev ve TypeSafe API anahtarıyla kodu tarayan ve doğal dille tanımlanmış kurallara göre olası sorunları raporlayan bir CLI aracıdır.

Neden yükseliyor · 12 günlük yaşına kıyasla 226 yıldız ve son 28 günde 114 commit dikkat çekici erken ilgi ve geliştirme temposuna işaret ediyor. Ancak yalnızca 3 farklı yazar var; bu nedenle ilginin sebebini veya geniş kullanıcı benimsemesini bu verilerden doğrulamak mümkün değil.

graf is graphify, rebuilt properly in rust: 1000x faster search, 89x faster updates, and one native binary.

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, wi

Static reproducibility checks, experiment replay, and verification for ML pipelines.