Ranked by Attention Score: stars gained over the last 7 complete days
16 repositories by Attention Score · Oct 28, 2026 – Nov 3, 2026 (UTC)
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
Turn any codebase into a knowledge graph grounded in formal methods. Your AI agents get exact answers for any code-related task, ensure correctness, and optimize time and token usage.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Tooling and libraries to enforce zero heap allocations in Golang
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
Your agent writes bad React. This catches it
ShellCheck, a static analysis tool for shell scripts
Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.
Security linter for AI-generated code: catches the exact vulnerabilities Copilot, Cursor and ChatGPT repeatedly produce. SQL injection, hardcoded secrets, JWT bypass, command injection and 15+ more rules. Grade A–F. Zero config. CI/CD ready.
A static analyzer for Java, C, C++, and Objective-C
PHP Static Analysis Tool - discover bugs in your code without running it!