Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Catch common Java mistakes as compile-time errors
Tfsec is now part of Trivy
Awesome autocompletion, static analysis and refactoring library for python
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
- code-property-graph
- compiler-theory
- program-analysis
- robdd
🔰 Instant PHP quality checks from your console
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis