1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Ranked by Attention Score: stars gained over the last 30 complete days
42 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
A fast type checker and language server for Python
Continuous Inspection
Modern C++ Programming Course (C++03/11/14/17/20/23/26)
Programming style, best practices, and coding conventions.
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
A tool to enforce Swift style and conventions.
Combination of multiple linters to run as a GitHub Action or standalone
A static analyzer for Java, C, C++, and Objective-C
Static code analysis for Kotlin
An extensible multilanguage static code analyzer.
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs included, with autofixes.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
It's not just a linter that annoys you!
The strictest and most opinionated python linter ever!
🐰 Bencher - Continuous Benchmarking
Performant type-checking for python.
⚙️ The static code analysis tool you need for your HTML
CaptainHook is a very flexible git hook manager for software developers that makes sharing git hooks with your team a breeze.
Code analyzer for C# and VB.NET projects
A static code analysis tool for Crystal
A PHP code-quality tool
Error Prone extensions: extra bug checkers and a large battery of Refaster rules.
Code coverage for Ruby with a powerful configuration library and automatic merging of coverage across test suites
:octocat: A curated awesome list of flake8 extensions. Feel free to contribute! :mortar_board:
CodeCompass is a software comprehension tool for large scale software written in C/C++, C# and Python.
Deterministic quality scorer for AI agent instruction files — 8-dimension scoring with security, multi-format (SKILL.md, CLAUDE.md, .cursorrules, AGENTS.md), anti-gaming detection, zero dependencies
📗 How to write cross-platform Node.js code
Analyzes Elm projects, to help find mistakes before your users find them.
Delphi language plugin for SonarQube
:whale: Keep an eye on your docker image size and prevent it from growing too big
🤖 Repeat tests. Repeat tests. Repeat tests.
Set of the strictest linters for your next frontend app
Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.
Upkeep — an AI audit crew for your repo. Catches docs/spec/asset drift with evidence; output-only. Claude Code plugin/skill + reusable CI workflow.