67,262 visible repositories in the index
1–18 of 18 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
Flowistry is an IDE plugin for Rust that helps you focus on relevant code.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
A command line tool to mine and analyze data from version-control systems
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Chronos - A static race detector for the go language
An Elixir tool for checking safety of database migrations.
👮Sanitize your Assets.xcassets files
Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes.
Static analysis tool to prevent logging of sensitive data by detecting struct fields marked as sensitive.
Database smell detector
PostgreSQL migration linter. Blocks unsafe migrations before merge: 112 rules, the real Postgres parser, lock analysis, auto-fix. CLI, GitHub Action, MCP.