#350 · +119 · 1d ·GitHub
SkillSpector helps you answer: "Is this skill safe to install?"
Global
CAUTION] USE AT YOUR OWN RISK. BE EXTREMELY CAREFUL. This suite is > designed to generate and execute autonomously generated code that may be > unstable or perform unexpected actions.
Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.
#2548 · +10 · 1d ·GitHub
0) — built to > run on any agent harness, not just Claude Code. This fork's focus: > harness portability, sandboxed (containerized) exploit validation, > and measured-impact PoCs. See > Why the changes · > What this fork changes · > The numbers.
Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
#4365 · +3 · 1d ·GitHub
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
The open-source, self-evolving, multi-model harness for security research.