- Leakguard @doazvjettu/leakguard-mcpStatic analyzer flagging lookahead bias & data leakage in ML/trading code before backtest.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Codereviewbuddy @detailobsessed/codereviewbuddyMCP server that helps AI coding agents interact with AI code reviewers on GitHub PRs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Locksmith @cxk280/locksmithLints PostgreSQL migrations for dangerous locking operations and suggests safe rewrites.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Boltwork @squidboy30/boltwork-mcpAI services via Bitcoin Lightning — PDF summarisation, code review, translation and more.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- QA Radar @muratkus/qaradarTells AI agents which files to test first — churn, coverage, and test mapping as risk scores.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Atlas Pipeline @iamnishant51/atlas-pipeline7-stage AI pipeline MCP server: Intent→Context→Git→Decompose→Variants→Critique→Optimize11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- github-twin @christopherdavenport/github-twinPersonal RAG over your GitHub history (commits, code, reviews), served to Claude Code over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Code Reviewer Ai @csoai-org/code-reviewer-ai-mcpCode Reviewer Ai MCP Server by MEOK AI Labs12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- PySpark @annasmazhar/pyspark-mcpSQL to PySpark conversion, AWS Glue job generation, and Spark code optimization.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- GateTest @gatetest/gatetest120-module QA gate. Give Claude eyes (screenshots), ears (Sentry errors), and hands (verify fixes).6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Agent Release Auditor @veyndrasystems/agent-release-auditorDeterministic release gate for AI-written code and coding agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Tribunal @thebotclub/tribunalTribunal — Enterprise Claude Code plugin. TDD enforcement, quality gates, vault of rules and agents.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Fixme Agent @rotem1230/fixme-agentReal-time AI code quality — 30 validators, 17 languages, 813+ checks5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AI Validation @zuhcya/ai-validationIndependent AI code validation: test bias, edge cases, coverage gaps.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CodeSherlock @fgc-shreyansh-chachaundiya/codesherlock-mcp-serverAI-powered static and contextual code analysis MCP server6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- harmony-mcp @abduljabbarbxr/harmony-mcpRepo rules enforcement for AI agents. Checks diffs against repo conventions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sigasi Magic HDL @sigasi/magic-hdlAnalyze and verify Verilog, SystemVerilog, and VHDL projects from AI agents over MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Weakspot @weakspot/weakspotAudit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.22% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- ReviewGate @reviewgate/reviewgateCode review against your team standards, before the pull request: generator finds, judge confirms6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- RTL Lint MCP @jaspresi/rtl-lint-mcpLint Verilog and SystemVerilog files and projects with structured diagnostics.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Frappe Inspector @belius303/frappe-inspectorStatic analysis tools for Frappe Framework and ERPNext projects via local stdio MCP.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- LeakRank Guard @prototeemo/leakrank-guardScans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Ruchy @noahgift/ruchy-mcpMCP server for Ruchy: code analysis, scoring, linting, formatting, and transpilation tools4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Cloud Agent @joepangallo/cloud-agentAI software engineer — writes code, opens PRs, reviews code, generates tests, and more.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
