87,075 visible repositories in the index
1–24 of 143 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
PHP Static Analysis Tool - discover bugs in your code without running it!
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Continuous Inspection
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Remove unused CSS. Also works with single-page apps.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Go security checker
Nginx configuration static analyzer
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Bandit is a tool designed to find common security issues in Python code.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
A JavaScript checker and optimizer.
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
A static analysis security vulnerability scanner for Ruby on Rails applications
Tfsec is now part of Trivy
Static analysis for GitHub Actions (and more)
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
static analysis of C/C++ code