Havuz

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

Agent skills for fallow. They teach coding agents (Claude Code, Codex, Cursor, and others) to check health, complexity, duplication, archite

The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]

Predict the silent integration traps an AI agent would ship (zero-revenue configs, auth bypasses, immutable wrong choices) — then enforce, i

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-

Контроль качества 1С-разработки для Claude Code: стандарты, принципы ООП и паттерны, XML метаданных, блокирующие гейты и проверяемый след пр

Interactive static pattern discovery tool to locate structures from frequent patterns

Turn a public GitHub repository into an interactive software architecture graph. Static analysis, flow tracing, analytics. MIT licensed.

Find unused and dead Helm values: typos, keys a chart dropped, keys your AI agent made up, and the ones a chart upgrade silently breaks. CLI

Lint CSS cascade layers across a whole project — contradictory order between files, silent name merges, unlayered rules winning.

Flag ATTACH DATABASE footguns — cross-database atomicity, alias shadowing, ambiguous unqualified tables.

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

Agent Reliability Analyzer: deterministic scanner that finds and fixes AI agent reliability failures

Deterministic code quality gate for AI coding agents (Claude Code, Codex, pi): git hooks that block test tampering, hold the CRAP bar on cha

A PHPStan extension for analysis of Laravel applications and packages.

PE/ELF x86/x64 CFG extractor

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

The 10-second codebase tour. Understand any repo in one command.

Static analysis for Sierra adventure games: finds softlocks by abstract interpretation of decompiled SCI scripts, derives and verifies guard

Per-entry-point, navigable call-graph visualizations of Solidity repositories — for Web3 security auditors.

Static Ansible linting in Go: the 38 ansible-lint rules decidable from YAML alone, byte-for-byte pep8 output, no Ansible runtime.

The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, a

A tool that replaces everything that can be deterministic in repository work: search, symbols, callers, task scope, history, review and Git

Excel VBA integration for VS Code - Tree View / Full Direct VBA Read+Write / LiveShare Compatible / Direct Agentic AI Integrations

Static analysis for Redis Lua scripts — cluster-unsafe key access, unbounded loops, sandbox violations.

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, via MCP.

MIT-licensed code knowledge graph: index any source repo into a queryable graph of symbols, call chains and blast radius — with wiki generat

Static analysis and health checks for dbt projects.

Static-analysis-based dataset for training LLMs to detect, explain, and patch security vulnerabilities (Java, Korean/English annotations, ve

Get your repo ready for AI.

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Architecture-aware code search, dependency graphs, and impact analysis for Python, TypeScript, Rust, C#, Java, Go, Ruby, Rails, Free Pascal,

A living architecture map for any codebase, any language, any coding agent. See what every change does to the structure, and stop it crossin

Android Studio plugin that catches common Kotlin coroutine and Flow mistakes (leaks, ANRs, flaky tests) with context-aware quick fixes

Browser-based, syntax-aware code comment stripper that removes comments from source code while preserving strings, URLs, template literals,

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

Jadart is a fast Flutter decompiler designed for Agents/Mobile Security Researchers.

A single-binary CLI tool that detects a software project's toolchain, configuration, and conventions, then outputs a structured report.

Audits a repository for how ready it is for AI coding agents, and returns a prioritized fix backlog with evidence for every finding.

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

CodeAutopsy is an AI-powered GitHub repository analyzer that automatically detects architecture patterns, execution flow, tech stack, and ke

Semantic code intelligence MCP server for Claude Code - project maps, symbol search, impact analysis, and more

Offline prompt-contract auditor for Hermes, Claude Code, Codex, OpenCode & OpenClaw. Pre-write guard before agents ship vague code. Zero dep

Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rus

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

SQL as a first-class language: formatting, linting, security auditing and pre-commit hooks for your .sql files, plus type-safe code generati

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidenc