MCP servers and skills: search, filter by where they run, and compare.
IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a co
OfficialSkillApache-2.0★ 493No key
AI-powered static analysis issue fixer - MCP server for SARIF reports
DockerApache-2.0Few starsNo key
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/r
PythonApache-2.0★ 847No key
Static analysis for AI agent configs, tool descriptions, and system prompts — catches vague tool descriptions, missing stop conditions, and schema gaps before they reach runtime. Zero-LLM, determinist
SkillApache-2.0★ 140No key
Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.
PythonApache-2.0★ 517No key
Multi-language static analysis for agents, editors, and large repositories.
SkillApache-2.0★ 17No key
AI-powered spec generation and review using multi-repo code graph intelligence for backend teams that ship to production.
PythonApache-2.0★ 630No key
Audits a repository for how ready it is for AI coding agents, and returns a prioritized fix backlog with evidence for every finding.
SkillApache-2.0★ 23No key
🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autonomous Agent Teams with visual orchestration...
SkillApache-2.0★ 314No key
Deterministic scanner that finds and fixes agent reliability failures
DockerApache-2.0★ 75No key
Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP
PythonApache-2.0★ 142No key
codexqa: 11 local-first Agent Skills for Cursor, Claude Code, Codex & OpenClaw — change impact analysis, AI code review, defect scan, testcase generation, browser replay & RCA.
SkillApache-2.0★ 192No key
Catch breaking dbt schema changes before dbt run executes them: dropped columns, the downstream models and data tests they break, contract violations. Static analysis of compiled SQL, no warehouse con
PythonApache-2.0★ 2Few starsNo key
The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, and SDK tool surfaces. Open-source CLI + GitHub Action.
PythonApache-2.0★ 90No key
Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.
PythonApache-2.0★ 42No key
Local, model-neutral electronics MCP for CRUMB static analysis and Logisim-evolution project inspection, truth tables, and test vectors.
Node.jsApache-2.0★ 1Few starsNo key
graf is graphify, rebuilt properly in rust: 1000x faster search, 89x faster updates, and one native binary.
SkillApache-2.0★ 48No key
Prove AI-written Swift before merge: Xcode-backed verdicts, exact Fix Packets, and signed receipts for PRs and CI.
Node.jsApache-2.0★ 18No key
SAST intelligence for AI agents. Complexity, hotspots, blast radius, and tech debt analysis over MCP.
DockerApache-2.0★ 20No key
Live code graph that fuses static analysis (tree-sitter) with OpenTelemetry runtime traces, queried over MCP so AI coding agents get real full-stack context.
SkillApache-2.0★ 22No key
Shows what a code change can break before an AI edits, and checks the repo before it says done.
PythonApache-2.0★ 4Few starsNo key
The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages. MCP server + CLI.
SkillApache-2.0★ 69No key
Claude Code plugin that scans a package before the agent runs npx, npm install, pip install, uvx or claude mcp add. Malicious indicators block the install. High-risk packages need your approval. The s
PythonApache-2.0★ 12No key
Open-source security scanner for AI Agent skills, plugins & MCP servers. 39 detection rules. pip install prism-scanner
PythonApache-2.0★ 27No key
Who stands behind it
