- Anti-Vibe @hellstellar/anti-vibeRead coding-agent output one sentence at a time, skim it by heading, or speed-read it.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Vibe Gate @mustafacagri/vibe-gate-mcpAdversarial Quality Gate MCP for vibe-coding: IDE AI vs Critic AI, human decides on deadlockNot assessed yet.Runs on your machine, installed from npm.
- orm-preflight @sikandar100/orm-preflightChecks TypeORM migrations for data loss, table locks, and deploy problems before they run.Not assessed yet.Runs on your machine, installed from npm.
- Guard @codapult/guardLocal-first architecture guardrails and project context for JS/TS AI coding agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- GitLab @mmedum/gitlab-mcpGitLab over MCP from your own account: issues, merge requests, reviews, the repository and CI.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- RepoRipple @adiarora06/reporippleDeterministic repository change-impact analysis for engineers and coding agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Code Assistant @j0hanz/code-assistantGemini-powered MCP server for code analysis.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Diff @mukundakatta/diff-mcpCharacter-precise unified diff + patch application + patch parsing.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Codna — repository intelligence @thyn-ai/codnaRepo intelligence: triage, fix PRs, SARIF reachability, recall. Free codna login to execute.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- ClawHub @maxz712/clawhubGit hosting for AI agents: repos, changes, focused diffs, reviews, issues, code search.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Checktrail @stsepelin/checktrailLocal code validation with explicit execution trust and evidence of what actually ran.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Secret Hygiene @mrfentmen/secret-hygiene-mcpCount secret-like patterns in bounded local files without returning values, keys, paths,...6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bouncer Gates @ajeermahmood/bouncer-gatesStops secrets, cross-tenant queries and unsafe migrations before they merge.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AETRE & The Governed Agent @grayclayton/aetre-mcpDecision-theoretic triage and fail-closed agent gating: 32 tools over stdio.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- Sonar MCP Server @igorolv/sonar-mcp-serverRead-only SonarQube Community Build access for AI agents: issues, hotspots, rules, code snippets4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- AGZ Rust MCP @ugur-murat-alt/agz-rust-mcpBounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- Django Chainsaw @syrian963/django-chainsaw-mcpFinds what will hurt in a Django project: cascades, N+1, unsafe migrations, tenant leaks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Weavatrix Quality @weavatrix/weavatrix-qualityRevision-bound quality planning, execution, evidence, proof, and Playwright authoring.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AGZ Rust Coder @ugur-murat-alt/agz-rust-coderBounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- Koda @aabxtract/kodaVerification and memory layer for coding-agent workflows.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bitbucket @droplinkperformance/bitbucket-mcp-serverProvider-agnostic, AI-review-first MCP server for Bitbucket Cloud.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Subagent MCP @thang1710/subagent-mcpLet Codex orchestrate external coding agents through their native harnesses.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Grok Build @nuruvala/grok-build-mcp-serverRun the Grok Build CLI as MCP tools: agent runs with live progress, code review, web research.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Loadbearing @andypgray/loadbearingChecks .NET solutions against a fluent C# architecture spec and explains the rules to agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
