Static-analysis projects on GitHub

1. 1
   #1 · morluto/rea

   rea

   REA lets AI coding agents reverse engineer apps, binaries, websites, and other software through a single MCP server and CLI, returning findings with the evidence behind them so an agent can explain a feature or rebuild it.

   340.9K
2. 2
   #2 · Graphify-Labs/graphify

   graphify

   Graphify turns a whole codebase — plus its docs, SQL schemas, configs, and PDFs — into a queryable knowledge graph you traverse instead of grepping files.

   129.3K
3. 3
   #3 · microsoft/TypeScript

   TypeScript

   TypeScript is a language for application-scale JavaScript: JavaScript extended with a type system, developed by Microsoft for building large applications.

   111.6K

4. 4

   ghidra

   91.8KNationalSecurityAgency/ghidra · Java

   Ghidra is a software reverse engineering (SRE) framework created and maintained by the NSA's Research Directorate, used to disassemble, decompile, graph, and analyze compiled code.

   • disassembler
   • decompiler
   • malware-analysis
   • scripting
5. 5

   codegraph

   74.5Kcolbymchenry/codegraph · C

   CodeGraph pre-indexes your codebase into a knowledge graph of every symbol, call edge, and dependency, so AI coding agents get the exact code they need in one call instead of crawling files.

   • code-intelligence
   • kiro
   • code-search
   • code-analysis
6. 6

   ImHex

   55.5KWerWolv/ImHex · C++

   ImHex is a hex editor built for reverse engineers, programmers, and anyone analyzing binary data, with a custom pattern language for parsing and highlighting file structures.

   • analyzer
   • multi-platform
   • disassembler
   • forensics
7. 7

   DefinitelyTyped

   51.4KDefinitelyTyped/DefinitelyTyped · TypeScript

   DefinitelyTyped is a massive community repository that hosts TypeScript type definitions (.d.ts files) for JavaScript packages that don't ship their own types, published to npm under the @types scope.

   • types
   • type-safe
   • package-manager
   • monorepo
8. 8

   jadx

   51.1Kskylot/jadx · Java

   jadx is a Dex to Java decompiler: command line and GUI tools that produce Java source code from Android Dex and Apk files.

   • dex
   • decompilation
   • disassembler
   • debugger
9. 9

   ruff

   50.2Kastral-sh/ruff · Rust

   Ruff is an extremely fast Python linter and code formatter written in Rust, built to replace tools like Flake8, Black, isort, pydocstyle, pyupgrade, and autoflake with a single command-line tool.

   • lint
   • formatter
   • styleguide
   • static-code-analysis
10. 10

    awesome-java

    49.3Kakullpp/awesome-java

    A curated list of frameworks, libraries, tools and resources for the Java programming language, organized into categories like AI, build tools, caching, CLI, bytecode manipulation and more.

    • awesome-lists
    • tui
    • awesome
    • kubernetes
11. 11

    GitNexus

    48Kabhigyanpatwari/GitNexus · TypeScript

    It indexes any codebase into a knowledge graph — dependencies, call chains, clusters, execution flows — and serves it to AI coding agents via MCP tools so they stop making blind edits.

    • code-intelligence
    • code-search
    • refactoring
    • graph-database
12. 12

    open-code-review

    47.7Kalibaba/open-code-review · Go

    An AI-powered code review CLI born inside Alibaba: it reads Git diffs, sends changed files to a configurable LLM agent, and returns structured review comments with line-level precision.

    • gitlab
    • pull-request
    • ci-cd
    • code-quality
13. 13

    black

    42Kpsf/black · Python

    Black is the uncompromising Python code formatter: it reformats your code into one opinionated style, freeing you from hand-formatting and style debates.

    • formatter
    • code
    • cli-tool
    • hacktoberfest
14. 14

    shellcheck

    40.2Kkoalaman/shellcheck · Haskell

    ShellCheck is a free static analysis tool for shell scripts: it reads your bash/sh code and reports warnings and suggestions for problems in it.

    • haskell
    • static-code-analysis
    • code-analysis
    • linter
15. 15

    security-audit-skill

    33.1Kcloudflare/security-audit-skill · JavaScript

    A Cloudflare coding-agent skill that turns your agent into a security auditor: it orchestrates isolated agents through a structured, multi-phase audit and returns independently verified, machine-readable findings.

    • security-testing
    • security-audit
    • vulnerability-scanner
    • ai-security
16. 16

    code-review-graph

    32.3Ktirth8205/code-review-graph · Python

    A local-first code intelligence tool: it builds a persistent graph of your codebase so AI coding assistants read only the files that matter on review and large-repo tasks, instead of re-reading everything.

    • token-optimization
    • graphrag
    • tree-sitter
    • code-analysis
17. 17

    p3c

    30.8Kalibaba/p3c · Kotlin

    Alibaba Java Coding Guidelines (P3C): Java coding rules distilled from the accumulated best practices of Alibaba Group's technical teams, shipped as PMD static-analysis rules and IDE plugins.

    • intellij-plugin
    • jetbrains
    • linter
    • ide
18. 18

    dnSpy

    29.7KdnSpy/dnSpy · C#

    dnSpy is a Windows debugger and assembly editor for .NET and Unity programs - it lets you set breakpoints, step through code, and even edit methods and metadata without having the original source code.

    • disassembler
    • debugger
    • decompiler
    • malware-analysis
19. 19

    standard

    29.4Kstandard/standard · JavaScript

    JavaScript Standard Style — a zero-configuration style guide, linter and automatic code fixer for JavaScript. It enforces one consistent style and catches programmer errors early, with nothing to set up.

    • standard
    • ecmascript
    • static-code-analysis
    • development
20. 20

    awesome-actions

    28.3Ksdras/awesome-actions

    A curated, categorized index of GitHub Actions: ready-made actions, workflow examples, official resources and tutorials you can plug into your repository's automation.

    • continuous-integration
    • awesome-lists
    • ci-cd
    • cheatsheet
21. 21

    YouCompleteMe

    25.9Kycm-core/YouCompleteMe · Python

    YouCompleteMe (YCM) is a fast, as-you-type, fuzzy-search code completion, comprehension and refactoring engine for Vim. It has several completion engines built in and supports any protocol-compliant Language Server, so it can work with practically any language.

    • autocompletion
    • code-completion
    • clang
    • language-server-protocol
22. 22

    slim

    23.5Kslimtoolkit/slim · Go

    SlimToolkit (formerly DockerSlim) is a free, open-source CLI toolkit that inspects, optimizes and debugs container images. It can shrink an image by up to 30x without you changing anything in your Dockerfile — and makes the result more secure too.

    • container-security
    • minifier
    • hardening
    • containerization
23. 23

    tools

    23.4Krome/tools · Rust

    Rome is a unified toolchain for JavaScript, TypeScript, and the web: one program that formats, lints, and bundles code, built to replace separate tools like Babel, ESLint, webpack, Prettier, and Jest.

    • formatter
    • bundler
    • toolchain
    • linter
24. 24

    flow

    22.3Kfacebook/flow · Rust

    Flow is a static typechecker for JavaScript: it adds static typing to your code to catch errors early and improve quality. The project goes back to 2014 and is written in Rust.

    • ast
    • parsing
    • arm64
    • code-quality
25. 25

    Mobile-Security-Framework-MobSF

    22KMobSF/Mobile-Security-Framework-MobSF · JavaScript

    MobSF is an automated, all-in-one mobile security framework: it performs static and dynamic analysis, penetration testing, malware analysis and privacy analysis on Android, iOS and Windows Mobile apps.

    • dynamic-analysis
    • api-testing
    • mobile-security
    • owasp
26. 26

    roslyn

    20.7Kdotnet/roslyn · C#

    The .NET Compiler Platform (Roslyn) — the open-source implementation of the C# and Visual Basic compilers, plus rich APIs for building code analysis tools.

    • analyzer
    • nuget
    • visual-studio
    • code-analysis
27. 27

    mypy

    20.7Kpython/mypy · Python

    Mypy is a static type checker for Python: you add type hints (PEP 484) to your code and it warns you when you use those types incorrectly, catching bugs without even running the program.

    • typechecker
    • types
    • static-code-analysis
    • code-analysis
28. 28

    SkillSpector

    20.6KNVIDIA/SkillSpector · Python

    SkillSpector is a security scanner for AI agent skills (used by Claude Code, Codex CLI, Gemini CLI, and MCP) that detects vulnerabilities, malicious patterns, prompt injection, data exfiltration, and supply-chain risks before you install a skill.

    • sarif
    • sast
    • security-scanner
    • agent-security
29. 29

    ty

    19.9Kastral-sh/ty · Python

    ty is an extremely fast Python type checker and language server written in Rust, built by Astral (the team behind uv and Ruff). It is currently in beta.

    • language-server
    • uv
    • neovim
    • ide
30. 30

    SwiftLint

    19.8Krealm/SwiftLint · Swift

    SwiftLint is an open-source linter that enforces Swift style and conventions — rules generally accepted by the Swift community, loosely based on the now-archived GitHub Swift Style Guide.

    • linting
    • linter
    • xcode
    • code-quality
31. 31

    golangci-lint

    19.5Kgolangci/golangci-lint · Go

    A fast linters runner for Go: one tool that runs over a hundred Go linters on your codebase in a single pass.

    • code-analysis
    • linter
    • code-quality
    • ci
32. 32

    PHP-Parser

    17.5Knikic/PHP-Parser · PHP

    A parser written in PHP that turns PHP code into an abstract syntax tree (AST). Its purpose is to simplify static code analysis and manipulation of PHP code.

    • php-library
    • static
    • analysis
    • refactoring
33. 33

    semgrep

    17.1Ksemgrep/semgrep · C

    Semgrep is a fast, open-source static analysis tool that scans source code to find bugs, security issues, and enforce coding standards using rules that look like ordinary code rather than abstract syntax trees or regex.

    • sast
    • supply-chain-security
    • static-code-analysis
    • secrets
34. 34

    rust-analyzer

    16.9Krust-lang/rust-analyzer · Rust

    rust-analyzer is a language server that provides IDE functionality for writing Rust programs — the code-intelligence engine you use while writing Rust in an editor.

    • emacs
    • language-server-protocol
    • refactoring
    • autocomplete
35. 35

    ruby-style-guide

    16.5Krubocop/ruby-style-guide

    A community-driven Ruby coding style guide: it recommends best practices so real-world Ruby programmers can write code that other people can maintain. It deliberately favors established real-world usage over unproven ideals.

    • standards
    • style-guide
    • educational
    • coding
36. 36

    typescript-eslint

    16.4Ktypescript-eslint/typescript-eslint · TypeScript

    typescript-eslint is the monorepo that provides the tooling enabling ESLint to understand and lint TypeScript code, including the parser and plugin rules.

    • static-code-analysis
    • eslint
    • linter
    • devtools
37. 37

    ast-grep

    16.3Kast-grep/ast-grep · Rust

    ast-grep (sg) is a CLI tool for structural search, linting and rewriting of source code — like grep, but matching the abstract syntax tree instead of raw text.

    • grep
    • babel
    • refactoring
    • static-code-analysis
38. 38

    infer

    15.7Kfacebook/infer · OCaml

    Infer is a static analysis tool that finds bugs in Java, C, C++, and Objective-C code by analyzing it without running it. It lives under Facebook's GitHub and is written in OCaml.

    • static-code-analysis
    • objective-c
    • code-quality
    • cli-tool
39. 39

    pyright

    15.7Kmicrosoft/pyright · Python

    Pyright is a full-featured, standards-based static type checker for Python, built by Microsoft for speed on large codebases.

    • typechecker
    • static-code-analysis
    • vscode-extension
    • microsoft
40. 40

    bytecode-viewer

    15.7KKonloch/bytecode-viewer · Java

    Bytecode Viewer (BCV) is a lightweight Java/Android reverse engineering suite: drag in a Jar or APK and it decompiles, disassembles, searches and debugs it, powered by several open source tools.

    • bytecode
    • debugger
    • malware
    • decompiler
41. 41

    pre-commit

    15.6Kpre-commit/pre-commit · Python

    pre-commit is a framework for managing and running git pre-commit hooks across many programming languages, so you can catch issues (formatting, lint errors, secrets, etc.) before a commit is made.

    • refactoring
    • linter
    • git
    • devops
42. 42

    react-doctor

    15Kmillionco/react-doctor · TypeScript

    React Doctor is a code-review tool that scans React code for the kind of mistakes AI coding agents tend to introduce, so bad patterns get caught before they ship.

    • linter
    • code-quality
    • code-review
    • best-practices
43. 43

    static-analysis

    14.8Kanalysis-tools-dev/static-analysis · Rust

    A curated list of static analysis (SAST) tools, linters and formatters for all programming languages, config files and build tools, focused on tools that improve code quality.

    • sast
    • analysis
    • static-code-analysis
    • code-analysis
44. 44

    awesome-malware-analysis

    14.3Krshipp/awesome-malware-analysis

    A curated 'awesome list' of malware analysis tools and resources, covering sample collection, sandboxes, detection tools, threat intelligence feeds, reverse engineering, and forensics.

    • dynamic-analysis
    • chinese-translation
    • threat-intelligence
    • forensics
45. 45

    phpstan

    14.1Kphpstan/phpstan · PHP

    PHPStan is a static analysis tool for PHP that finds bugs in your code without actually running it, catching whole classes of errors before you even write tests.

    • static
    • static-code-analysis
    • code-quality
    • debugging
46. 46

    ale

    14Kdense-analysis/ale · Vim Script

    ALE (Asynchronous Lint Engine) is a Vim/Neovim plugin that lints your code asynchronously as you type and can fix files, acting as a Language Server Protocol client for things like completion, go-to-definition, and hover info.

    • neovim-plugin
    • vim-plugin
    • language-server-protocol
    • vim script
47. 47

    linguist

    13.7Kgithub-linguist/linguist · Ruby

    Linguist is the library GitHub.com uses to detect the programming language of files (blobs), ignore binary or vendored files, suppress generated files in diffs, and build the language breakdown graphs shown on repository pages.

    • graphs
    • code-analysis
    • text-processing
    • syntax-highlighting
48. 48

    rust-clippy

    13.6Krust-lang/rust-clippy · Rust

    Clippy is a collection of over 800 lints that catches common mistakes in Rust code and nudges it toward idiomatic style. It runs alongside the compiler as a cargo subcommand.

    • lint
    • clean-code
    • rust-lang
    • code-analysis
49. 49

    PHP-CS-Fixer

    13.6KPHP-CS-Fixer/PHP-CS-Fixer · PHP

    PHP CS Fixer is a tool that automatically fixes your PHP code to follow coding standards — unlike a plain linter, it does not just detect problems, it fixes them for you.

    • formatter
    • jetbrains
    • coding
    • linter
50. 50

    mastg

    13.3KOWASP/mastg · Python

    A comprehensive OWASP manual for mobile app security testing and reverse engineering. It gives technical processes for verifying the weaknesses listed in the OWASP Mobile Security Weakness Enumeration (MASWE).

    • dynamic-analysis
    • android-application
    • network-analysis
    • checklist
51. 51

    cmake-examples

    13.1Kttroy50/cmake-examples · CMake

    A tutorial repository of example CMake projects, laid out from basic to advanced, showing how to use modern CMake for building, testing, and packaging C++ software.

    • clang
    • unit-testing
    • cmake
    • build-tool
52. 52

    grype

    13.1Kanchore/grype · Go

    Grype is a command-line vulnerability scanner that checks container images, filesystems, and SBOMs for known security vulnerabilities.

    • vulnerabilities
    • oci
    • supply-chain-security
    • devsecops
53. 53

    hadolint

    12.5Khadolint/hadolint · Haskell

    Hadolint is a smarter Dockerfile linter written in Haskell that helps you build best-practice Docker images. It flags mistakes and bad patterns in your Dockerfile before you build the image.

    • haskell
    • dockerfile
    • linter
    • bash
54. 54

    knip

    12.5Kwebpro-nl/knip · TypeScript

    Knip is a free and open-source tool that finds unused files, dependencies and exports in your JavaScript and TypeScript projects, so you can cut them before you ship.

    • maintenance
    • lint
    • code-analysis
    • linter
55. 55

    Detect-It-Easy

    11.8Khorsicq/Detect-It-Easy · JavaScript

    Detect It Easy (DiE) is a cross-platform tool that identifies file types and inspects executables (PE, ELF, Mach-O) for malware analysts, reverse engineers, and cybersecurity researchers, combining signature-based detection with a deep heuristic engine.

    • hacktoberfest2023
    • scanner
    • disassembler
    • pentest
56. 56

    awesome-cpp-cn

    11.2Kjobbole/awesome-cpp-cn

    This is a curated Chinese-language list of C++ resources: standard libraries, web frameworks, AI/ML libraries, databases, image processing, logging, static analysis tools, and more. It is a Chinese translation and maintenance of the original fffaraz/awesome-cpp list.

    • debugger
    • build-tool
    • web-framework
    • compiler
57. 57

    syntastic

    11.2Kvim-syntastic/syntastic · Vim script

    Syntastic is a syntax checking plugin for Vim: it runs your files through external syntax checkers and displays the errors inside Vim, on demand or automatically whenever you save.

    • lint
    • vim-plugin
    • vim script
    • linter
58. 58

    codex-security

    11.1Kopenai/codex-security · TypeScript

    Codex Security is OpenAI's CLI and TypeScript SDK for defining security policy and for finding, validating, and fixing security vulnerabilities in your code.

    • application-security
    • devsecops
    • vulnerability-scanner
    • ai-security
59. 59

    sonarqube

    11.1KSonarSource/sonarqube · Java

    SonarQube is a continuous inspection platform that statically analyzes your code to find bugs, vulnerabilities, security hotspots, and maintainability issues, explaining exactly what to fix and why.

    • code-quality
    • sysadmin
    • ci
    • security-tools
60. 60

    clair

    11.1Kquay/clair · Go

    Clair is an open source tool for static analysis of vulnerabilities in application container images, covering both OCI and Docker image formats.

    • vulnerabilities
    • oci
    • devsecops
    • vulnerability-scanner
61. 61

    timber

    10.9KJakeWharton/timber · Kotlin

    Timber is a logger with a small, extensible API that sits on top of Android's built-in Log class. You add behavior by planting Tree instances instead of calling Log.d/Log.e directly.

    • logger
    • lint
    • android-development
    • android-library
62. 62

    PHP_CodeSniffer

    10.8Ksquizlabs/PHP_CodeSniffer · PHP

    PHP_CodeSniffer is a pair of PHP scripts: 'phpcs', which tokenizes PHP, JavaScript, and CSS files to detect violations of a defined coding standard, and 'phpcbf', which automatically fixes many of those violations.

    • scripts
    • qa
    • coding
    • linter
63. 63

    reverse-engineering

    10.7KwtsxDev/reverse-engineering

    A curated list of reverse engineering resources: books, courses, practice grounds, and a big toolbox section spanning hex editors, disassemblers, debuggers, and dynamic analysis tools.

    • disassembler
    • forensics
    • malware
    • decompiler
64. 64

    super-linter

    10.6Ksuper-linter/super-linter · Shell

    A ready-to-run bundle of linters and code analyzers that validates your source code, enforces best practices and consistent formatting across dozens of languages, and reports issues as console output and GitHub Actions status checks.

    • cicd
    • linter
    • code-quality
    • code-review
65. 65

    rector

    10.4Krectorphp/rector · PHP

    Rector is a PHP tool that instantly upgrades and refactors PHP codebases: it automates upgrades from PHP 5.3 up to 8.5 plus framework migrations, and can keep code quality high continuously via CI.

    • refactoring
    • static-code-analysis
    • ast
    • code-quality
66. 66

    codeql

    10.2Kgithub/codeql · CodeQL

    This is the standard library and query collection for CodeQL, the code analysis engine that powers GitHub Advanced Security code scanning and GitHub's commercial security products.

    • application-security
    • code-analysis
    • devsecops
    • vulnerability-scanner
67. 67

    improve

    9.2Kshadcn/improve

    It's an agent skill that audits any codebase and writes implementation plans for other, cheaper models to execute - the expensive model does the thinking, cheap models do the typing.

    • planning
    • code-quality
    • code-review
    • agent-skill
68. 68

    android-reverse-engineering-skill

    8.2KSimoneAvogadro/android-reverse-engineering-skill · Shell

    A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, and authentication patterns — so you can document and reproduce them without the original source code.

    • mobile-security
    • decompiler
    • penetration-testing
    • hacking
69. 69

    deepsec

    8.2Kvercel-labs/deepsec · TypeScript

    Deepsec is an agent-powered vulnerability scanner that you run in your own infrastructure to do on-demand security review of an entire large codebase, surfacing hard-to-find issues that have been lurking for a long time.

    • vulnerability-scanner
    • code-review
    • sandbox
    • ci
70. 70

    repowise

    7.9Krepowise-dev/repowise · Python

    Repowise indexes a codebase once (code, dependency graph, git history, tests, docs, and architectural decisions) and then gives AI agents and developers cited answers, change-impact analysis, and concrete code-health fixes instead of making an agent rediscover the code every time.

    • code-intelligence
    • cursor-ai
    • refactoring
    • code-quality
71. 71

    closure-compiler

    7.7Kgoogle/closure-compiler · JavaScript

    A tool for making JavaScript download and run faster — a true compiler for JavaScript: it compiles JavaScript to better JavaScript, parsing your code, removing dead code and rewriting and minimizing what is left.

    • minifier
    • bazel
    • bundler
    • transpiler
72. 72

    skills

    7.7Ktrailofbits/skills · Python

    This is Trail of Bits' Claude Code plugin marketplace: a curated collection of AI-agent skills for security research, vulnerability detection, and audit workflows, covering everything from smart contract audits to malware analysis and reverse engineering.

    • vulnerability-management
    • vulnerability-detection
    • security-audit
    • malware-analysis
73. 73

    defending-code-reference-harness

    7.6Kanthropics/defending-code-reference-harness · Python

    A reference implementation from Anthropic for finding and fixing vulnerabilities with Claude: a set of Claude Code skills (quickstart, threat-model, vuln-scan, triage, patch, customize) plus an autonomous scanning harness that runs a recon-find-verify-report-patch loop, built from learnings partnering with security teams.

    • security-automation
    • incident-response
    • fuzzing
    • devsecops
74. 74

    agent-skills

    7.1Ktech-leads-club/agent-skills · TypeScript

    Agent Skills is a curated, security-vetted registry of skills for AI coding agents — you install skills from it via a CLI or an MCP server into tools like Claude Code, Cursor, Antigravity, and GitHub Copilot.

    • windsurf
    • marketplace
    • copilot
    • antigravity
75. 75

    scriptc

    6.3Kvercel-labs/scriptc · TypeScript

    scriptc is an experimental compiler that turns TypeScript and JavaScript into typed IR, readable C, LLVM IR, native assembly/objects, native executables, or WebAssembly modules, producing standalone binaries that do not need Node.js to run.

    • clang
    • llvm
    • zig
    • transpiler
76. 76

    ghidra-mcp

    5.8Kbethington/ghidra-mcp · Java

    This is an MCP (Model Context Protocol) server that bridges Ghidra's reverse engineering engine with AI tools like Claude and Cursor, giving AI agents 245 tools to analyze, rename, document, and even emulate functions in binaries.

    • binary-analysis
    • debugging
    • model-context-protocol
    • reverse-engineering
77. 77

    anti-slop

    5.6Kdmmulroy/anti-slop · TypeScript

    A set of opinionated Oxlint rules that reject low-evidence and low-signal patterns in TypeScript and JavaScript codebases.

    • linting
    • style-guide
    • linter
    • code-quality
78. 78

    codeflow

    5.4Kbraedonsaunders/codeflow · HTML

    CodeFlow turns any GitHub repository (or local folder) into an interactive architecture map: a dependency graph showing how files connect, plus security, pattern, and code-health analysis.

    • d3js
    • github-api
    • security-scanner
    • code-analysis
79. 79

    fallow

    5.2Kfallow-rs/fallow · Rust

    Fallow is a Rust-based codebase intelligence tool for TypeScript/JavaScript that builds one dependency graph of a repository and reports unused code, circular dependencies, duplication, complexity hotspots, architecture boundary violations, and design-system styling drift.

    • static-code-analysis
    • design-systems
    • lsp
    • code-quality
80. 80

    claude-code-analysis

    4Kliuup/claude-code-analysis · TypeScript

    A Chinese-language static analysis document collection dissecting the source code of Claude Code, after its npm package accidentally shipped unminified source maps revealing the full TypeScript codebase.

    • source-code-analysis
    • security-research
    • agent-memory
    • sandbox
81. 81

    raptor

    3.9Kgadievron/raptor · Python

    RAPTOR turns a Claude Code session into an offensive/defensive security agent: Claude.md rules, sub-agents and skills orchestrate tools like radare2, Frida, Z3 and CodeQL for binary reverse-engineering, exploit-feasibility research, and software supply-chain (SCA) analysis.

    • supply-chain-security
    • fuzzing
    • malware-analysis
    • vulnerability-scanner
82. 82

    kani

    3.6Kmodel-checking/kani · Rust

    Kani is a bit-precise model checker for Rust programs: instead of sampling inputs like a test suite, it proves that your code is free of certain bugs and undefined behavior.

    • automated-testing
    • verification
    • code-analysis
    • code-quality
83. 83

    lint

    3.2Kshadcn-ui/lint · TypeScript

    An agent-first linter for Tailwind design systems: you define what is allowed, and when an agent breaks a rule the error explains what is wrong and suggests a fix using your components, variants, and theme.

    • tailwind
    • shadcn
    • eslint
    • design-tools
84. 84

    Cpp2IL

    3KSamboyCoding/Cpp2IL · C#

    Cpp2IL is a work-in-progress tool that reverses Unity's IL2CPP build process back into the original managed DLLs, letting you decompile IL2CPP Unity games into readable C#/CIL.

    • nuget
    • analysis
    • unity
    • disassembler
85. 85

    ASC

    2.5KMG1937/ASC · Python

    Droid ASC is a super FAST, lightweight Android decompiler built for AI agents and mobile researchers: instead of pre-indexing an APK, it extracts and decompiles code on demand in milliseconds.

    • dex
    • decompilation
    • decompiler
    • apk
86. 86

    mantis

    2.5Kgoogle/mantis · Python

    Mantis is a toolkit of skills plus a reference agent harness (built on Google's ADK) that lets AI coding agents autonomously find, reproduce, triage, and patch vulnerabilities in a codebase.

    • sast
    • gemini-api
    • vulnerability-detection
    • exploit-development
87. 87

    OpenHeart

    2.3KAhmadHassan-BTed/OpenHeart · Rust

    OpenHeart is a static analysis compiler written in Rust that parses source code into a formal graph representation called SCPG (Succinct Compositional Program Graph) and projects it into 19 different diagrams: 14 standard UML 2.5 views plus 5 compiler pipeline IRs.

    • ast
    • diagram
    • tree-sitter
    • github-pages
88. 88

    spinel

    2.3Kmatz/spinel · C

    Spinel is a Ruby ahead-of-time compiler that turns Ruby source code into standalone native executables by inferring types across the whole program and generating optimized C code.

    • type-inference
    • aot
    • ffi
    • ast
89. 89

    CoDiver

    1.9KAhmadHassan-BTed/CoDiver · Python

    CoDiver (formerly SMC-Software-Metrics-Calculator) is a unified platform for code quality, architecture metrics, and Agile analytics, combining Python AST parsing, Java static analysis, and sprint tracking into one Streamlit dashboard.

    • agile
    • streamlit
    • code-analysis
    • pandas
90. 90

    Seep-Reverse-Lab

    1.7Kangusdevgo/Seep-Reverse-Lab · Lua

    Seep Reverse Lab is an agent-native reverse engineering and security-audit workbench that lets an AI coding agent autonomously run Radare2, JADX, Apktool and Frida to triage binaries, decompile APKs, and determine whether an app's feature gates are enforced locally or verified by a server (a CWE-602 authorization audit).

    • ida-pro
    • pi-agent
    • mcp-tools
    • decompiler
91. 91

    ts-rust

    1.4Kpingdotgg/ts-rust · Rust

    ts-rust (tsc-rs) is an experimental Rust port of Microsoft's TypeScript 7 compiler, checker and language server, built almost entirely by AI coding agents (mainly Claude Opus 5.5) as a test of how far LLMs could go porting a large codebase.

    • lsp
    • vibe-coding
    • webassembly
    • vscode
92. 92

    leanrea

    1.2Kaicodeking/leanrea · Python

    leanrea is a single 8 KB skill file (SKILL.md) that teaches a coding agent to reverse-engineer apps and binaries using plain CLI tools like otool, nm, jadx and apktool directly, instead of routing through the REA MCP server and its 207 bundled tools.

    • decompiler
    • security-research
    • binary-analysis
    • agentic-coding
93. 93

    SlopMonster

    1.1KItsssssJack/SlopMonster · Python

    SlopMonster is a linter that scores written copy out of 5 for telltale AI-writing patterns and can fail a CI build on a bad score; it also has a cleanse step that uses a rival AI model to rewrite the flagged lines.

    • copywriting
    • ai-writing
    • writing-tools
    • linter
94. 94

    ps2-web-recomp

    1.1Ksnuri00/ps2-web-recomp · C++

    It is a project that statically recompiles PlayStation 2 game executables into C++ and WebAssembly so the games run in a browser, with the console's hardware emulated by a runtime that draws through WebGPU.

    • emulation
    • retrogaming
    • webassembly
    • audio-processing
95. 95

    compiler

    945edgcpp/compiler · C

    This is the open-source EDG C/C++ compiler front end project: a parser and semantic analyzer for C and C++ that is famous for matching Clang, GCC, and MSVC's parsing behavior (including their quirks) so vendors can embed it in their own tools.

    • cpp23
    • programming-languages
    • cpp14
    • compilers
96. 96

    awesome-reverse-engineering

    923morluto/awesome-reverse-engineering

    A curated list of reverse-engineering tools and learning resources covering binaries, applications, firmware, file formats, and protocols, organized by the task you need to do rather than alphabetically.

    • dynamic-analysis
    • disassembler
    • forensics
    • assembly
97. 97

    Reverse-Engineer-anything

    858NabilRFG12/Reverse-Engineer-anything

    REA is an MCP server that connects your coding agent to reverse-engineering tools, so it can inspect native binaries, JavaScript/Electron apps, .NET assemblies, websites, and more, then explain how a feature works with cited evidence.

    • ida-pro
    • gdb
    • evm
    • disassembler
98. 98

    gdp-ts

    818rauchg/gdp-ts · TypeScript

    gdp-ts is a tiny TypeScript library plus a linter and an AI coding-agent skill that implements the 'Ghosts of Departed Proofs' pattern, letting you catch authorization and entitlement bugs (like checking if a user can read or pay for a resource) at compile time instead of at runtime.

    • type-safe
    • access-control
    • linter
    • code-quality
99. 99

    openqodex

    771openqodex/openqodex · TypeScript

    OpenQodex is an open source AI code review tool for Claude Code and Codex that runs before you push: it scans only the lines you changed, then has a separate reviewer process check every scanner finding.

    • cline
    • sast
    • wsl
    • linter
100. 100

     VulnHunter

     752nealbridges/VulnHunter · Python

     An open-source, agentic AI security scanner that reasons like an attacker to find exploitable vulnerabilities in source code, proves them with executable proof-of-concept exploits, and fixes them test-first. It is a maintained fork of Capital One's VulnHunter, rebuilt to run on any agent harness instead of just Claude Code.

     • ai-penetration-testing
     • ai-security-tool
     • sast
     • poc

Showing the 100 most-starred of 131. See every one in the catalog.

• developer-tools2,990
• linux4,264
• macos3,624
• open-source5,767
• windows3,493
• cli2,284
• cross-platform2,682
• mit3,401
• code-quality101
• security1,006
• tool1,342
• security-tools293
• python2,440
• command-line-tool745
• nodejs1,536
• claude-code935
• linter52
• typescript1,847
• terminal1,136
• ai-agents1,330
• code-review104
• javascript1,863
• automation1,221
• reverse-engineering241