1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Ranked by Attention Score: stars gained over the last 7 complete days
34 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
An opinionated, curated list of tools for enforcing software development standards: one recommended tool per job, with limits.
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
A fast type checker and language server for Python
Continuous Inspection
Modern C++ Programming Course (C++03/11/14/17/20/23/26)
Programming style, best practices, and coding conventions.
A static analyzer for Java, C, C++, and Objective-C
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
It's not just a linter that annoys you!
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Keeps AI coding agents such as Claude Code, Codex, GitHub Copilot, Gemini CLI and Cursor to the least code that does the job and still works.
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
🐰 Bencher - Continuous Benchmarking
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs included, with autofixes.
Combination of multiple linters to run as a GitHub Action or standalone
An extensible multilanguage static code analyzer.
A tool to enforce Swift style and conventions.
Performant type-checking for python.
Static code analysis for Kotlin
⚙️ The static code analysis tool you need for your HTML
The strictest and most opinionated python linter ever!
A PHP code-quality tool
:octocat: A curated awesome list of flake8 extensions. Feel free to contribute! :mortar_board:
CaptainHook is a very flexible git hook manager for software developers that makes sharing git hooks with your team a breeze.
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
Code analyzer for C# and VB.NET projects
Simple Reviewer: a Codex skill for AI-assisted coding and Vibe Coding. Explain code, visualize workflows, and verify goals with evidence. | 简单的审阅者:协助 AI 编程与 Vibe Coding,解释代码、可视化流程,以证据复核目标。
Deterministic quality scorer for AI agent instruction files — 8-dimension scoring with security, multi-format (SKILL.md, CLAUDE.md, .cursorrules, AGENTS.md), anti-gaming detection, zero dependencies