Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
- ai-security
- application-security
- cli
- code-scanning
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
- semmle-ql
- codeql
- github-advanced-security
- github-security-lab
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
A static analysis security vulnerability scanner for Ruby on Rails applications
Tfsec is now part of Trivy
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
High performance, maintainable stylesheets.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Snyk CLI scans and monitors your projects for security vulnerabilities.
An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.
- hacktoberfest2025
- social-winter-of-code
- codegraph
- codegraphcontext
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Static analysis tool to detect potential nil panics in Go code
EMBA - The firmware security analyzer
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
- code-analysis
- query-language
- code-browser
- fuzzy-parsing
Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.
💎 Code quality CLI for universal linting, auto-formatting, security scanning, and maintainability
Interactive visualizations of Rust at compile-time and run-time
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
- static-analysis
- software-verification
- abstract-interpretation
- program-analysis
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.