47,133 repositories indexed
1–24 of 30 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Go security checker
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
A static analysis security vulnerability scanner for Ruby on Rails applications
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Awesome autocompletion, static analysis and refactoring library for python
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Beautiful and understandable static analysis tool for PHP
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
grep rough audit - source code auditing tool
TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards
Linting tool for CloudFormation templates
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only in tests. Finds unused methods, constants, properties and enum cases.
Turn any codebase into a knowledge graph grounded in formal methods. Your AI agents get exact answers for any code-related task, ensure correctness, and optimize time and token usage.
Detect uses of legacy Java APIs
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
Django application that performs SAST and Malware Analysis for Android APKs
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker