npm
calllint/calllint
Pre-flight risk linting for MCP and agent tools — check the blast radius before your agent runs them.
Apache-2.031. Juli 2026 · Metriken 2.10.0
Alle Tags
Katalog-Tag
#sarif
Alle Repositories im öffentlichen Register, die dieses Tag tragen — aus ihren GitHub-Topics oder den von ihren Paket-Registries veröffentlichten Schlagwörtern. Die Gesundheit wird nach derselben versionierten Methodik gemessen wie im übrigen Register.
47 Einträge
Go
rudrendupaul/tenantguard
CLI security scanner for self-hosted multi-tenant AI-agent platforms. 16 fail-closed OPA/Rego rules catch tenant-isolation defects (sandbox scoping, SSRF, cross-tenant cron/auth, secret leakage). SARIF and JSON output for CI.
Apache-2.015. Juli 2026 · Metriken 2.10.0
Go
skyway-harness-builder/workflow-lint
Standalone open-source linter for Skylence .sky workflow files
Apache-2.021. Juli 2026 · Metriken 2.10.0
Go
kidoz/vulners-cli
CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode
MIT17. Juli 2026 · Metriken 2.10.0
PyPI · crates.io · Maven +2
mattybellx/ansede
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
Eigene Lizenz17. Juli 2026 · Metriken 2.10.0
crates.io
tacticaldoll/tianheng
Reactive architectural governance for Rust — declare boundaries in Rust, react to drift in CI and at runtime. The 三儀: 圭表 (static) · 渾儀 (semantic) · 漏刻 (runtime). Govern by reaction, not instruction. On crates.io as the tianheng family.
Apache-2.029. Juli 2026 · Metriken 2.10.0
PyPI · npm · crates.io
JunHwan-Kwon/deepbom
Local static analysis and evidence generation for deployed AI model artifacts
Apache-2.04. Sept. 2026 · Metriken 2.10.0
npm
nsasoft/nsauditor-ai
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
MIT6. Sept. 2026 · Metriken 2.10.0
Go
bunta-expert/git-path-audit
Read-only CLI that finds Git paths that collide, change meaning, or fail to check out across Windows, macOS, and Linux.
MIT5. Sept. 2026 · Metriken 2.10.0
Packagist
phpcpd-next/phpcpd
phpcpd-next is a token-based copy/paste (clone) detector for PHP 8.5+, a modernized, openly-licensed successor to Sebastian Bergmann's phpcpd
BSD-3-Clause18. Aug. 2026 · Metriken 2.10.0
npm
BenAHammond/code-auditor-mcp
Architectural invariants and code quality analysis, enforced inside your AI agent's edit loop. MCP server + CLI + Claude Code plugin. TypeScript, JavaScript, Go.
MIT26. Juli 2026 · Metriken 2.10.0
npm
criticaldeveloper/critical-gate
Keine Repository-Beschreibung veröffentlicht.
MIT16. Juli 2026 · Metriken 2.10.0
Packagist
jbelien/phpstan-sarif-formatter
SARIF formatter for PHPStan
MIT29. Juli 2026 · Metriken 2.10.0
Go
safetylab/ShadowSecurityScanner
Free, open-source network vulnerability scanner & penetration testing tool that ranks findings by real-world exploitability (EPSS + CISA KEV). Single desktop app for Windows, macOS, Linux. No cloud, no telemetry. MIT.
MIT21. Juli 2026 · Metriken 2.10.0
npm
nsasoft/nsauditor-ai-agent-skill
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows. Works with Claude Code, Cursor, Windsurf, and any MCP-aware agent.
MIT6. Sept. 2026 · Metriken 2.10.0
npm
KaraboGerald/SeamShieldCLI
SeamShield Community CLI: local-first access-lane scanning for AI-built apps
MIT4. Aug. 2026 · Metriken 2.10.0
Go
tamish560/mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go stdlib only.
MIT20. Juli 2026 · Metriken 2.10.0