76,356 visible repositories in the index
1–24 of 46 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Nginx configuration static analyzer
Bandit is a tool designed to find common security issues in Python code.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Static Analyzer for Solidity and Vyper
Awesome autocompletion, static analysis and refactoring library for python
It's not just a linter that annoys you!
Find dead Python code
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
Pretty good call graphs for dynamic languages
An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.
Agent harness to make your slop code well-engineered and beautiful.
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
Visa Vulnerability Agentic Harness
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
Zero shot vulnerability discovery using LLMs
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
Security Scanner for Agent Skills
Interactive architecture diagrams for codebases