47,133 repositories indexed
1–24 of 30 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Nginx configuration static analyzer
Bandit is a tool designed to find common security issues in Python code.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Awesome autocompletion, static analysis and refactoring library for python
It's not just a linter that annoys you!
Find dead Python code
Pretty good call graphs for dynamic languages
Agent harness to make your slop code well-engineered and beautiful.
Detect copy-pasted and structurally similar code
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
NGINX configuration static analyzer
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Django application that performs SAST and Malware Analysis for Android APKs
H(igh) A(ssurance) ROS - Static analysis of ROS1 application code.
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
A tool for quantitative risk analysis of Android applications based on machine learning techniques
Spot vulnerabilities in postgres SQL scripts