static-analysis plugins

by Paweł Płatek

Comprehensive C/C++ security code review, with coverage verified against a parse of the source

by Andrea Cappa (Aptos Labs) & Paweł Płatek (Trail of Bits)

Comprehensive Rust security code review with specialized bug-finding agents covering the safe/unsafe boundary, memory safety in unsafe blocks, concurrency, panic-induced DoS, recursion-induced stack overflow, FFI, and async runtime hazards

by cloudguo123

AtomLane combines a universal safety core with platform-native, workload-tailored parallel execution on macOS Stable and native Windows Preview.

by Nikolai Vysotskyi

Framework-aware code intelligence MCP server. 87 framework integrations, 81 languages, semantic search with Signal Fusion (BM25 + PageRank + embeddings + identity), refactoring tools (rename/move/extract/codemod), change-impact analysis, security scanning, and decision/session memory.

by Masayoshi Mizutani

Guide for writing goast Rego policies: AST input format, Rego v1 rule contract, recipes, and testing workflow

by Trustabl

Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills: trustabl-scan scans your agent code with Trustabl (via a bundled MCP server) right after you write or change it, before you commit — optionally matching your declared dependencies against the OSV database for known CVEs — and trustabl-enrich applies the scan findings directly to your source files as targeted code edits.

by Trustabl

Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP. Ships two skills: trustabl-scan scans your agent code with Trustabl (via a bundled MCP server) right after you write or change it, before you commit — optionally matching your declared dependencies against the OSV database for known CVEs — and trustabl-enrich applies the scan findings directly to your source files as targeted code edits.

by Alexandre Mallet

Refuses any edit that breaks your architecture rules, before it reaches disk. A prompt asks; this enforces. SOLID, Clean Architecture, hexagonal, DDD and legacy rescue, with the same rules in your editor and your CI.

by romandredan

Контроль качества разработки 1С:Предприятие (BSL): стандарты #stdNNN, принципы структурного и объектно-ориентированного программирования, паттерны проектирования применительно к 1С, корректность XML-структур метаданных. Блокирующие гейты не дают объявить работу законченной, пока проверки не прогнаны, а машиночитаемый след фиксирует, что именно проверено и что пропущено.

by Weavatrix

Evidence infrastructure for AI software agents: 47 read-only repository intelligence tools through MCP.

by Hermes Labs

On-demand static analysis of AI system prompts: audit a prompt file for contradictions, coverage gaps, priority ambiguities and meta-paradoxes, locally and offline.

by Mao

Write/Edit 後に行数 tier と責務混在シグナル (import 多様性・命名の抽象度・定義数・制御フロー密度) を組み合わせて分割検討メモを additionalContext で返す非 block hook。言語/役割 (テスト/宣言的コード) で閾値を調整する

by Juan Pablo Diaz

Deno Fresh specialist for Claude Code: read-only semantic analysis MCP (routes, islands, components, middleware, server/client boundaries, request tracing, impact), Fresh reasoning skills, a structural validator with a headless CLI, hooks that keep the index fresh, and deno lsp wiring. Designed to sit under vise (orchestration) and beside livespec (symbol graph).

by Matt Hartigan

The MCP server over the repo graphy ate: hunt · descend · blast · walk · draw · explain — every answer a walk over the code's structure, no model decides an edge. Run `graphy eat .` first; the server reads .graphy/tenant.json under the project root.

by Shantanu

grep lost. Read the map. Includes 1 skill.

by Vouchington

Portable implementation, planning, publishing, issue, retrospective, event-driven CI, and PR workflow skills for Codex and Claude.