56,139 visible repositories in the index
1–24 of 105 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Remove unused CSS. Also works with single-page apps.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Go security checker
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
A JavaScript checker and optimizer.
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
A static analysis security vulnerability scanner for Ruby on Rails applications
Tfsec is now part of Trivy
Static analysis for GitHub Actions (and more)
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
Static Analyzer for Solidity and Vyper
TypeScript Compiler API wrapper for static analysis and programmatic code changes.
Awesome autocompletion, static analysis and refactoring library for python
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications