- Agent Release Auditor @veyndrasystems/agent-release-auditorDeterministic release gate for AI-written code and coding agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Tribunal @thebotclub/tribunalTribunal — Enterprise Claude Code plugin. TDD enforcement, quality gates, vault of rules and agents.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Fixme Agent @rotem1230/fixme-agentReal-time AI code quality — 30 validators, 17 languages, 813+ checks5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mintqa @adamgusky/mintqa-mcpMCP server for Mint — AI-powered QA that runs your app in a real browser on every PR.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- AI Validation @zuhcya/ai-validationIndependent AI code validation: test bias, edge cases, coverage gaps.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CodeSherlock @fgc-shreyansh-chachaundiya/codesherlock-mcp-serverAI-powered static and contextual code analysis MCP server6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AARF Utility Network @qolapps/aarf-utility-networkPaid AI utilities for web comparison, code checks, document extraction, security, and research.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- harmony-mcp @abduljabbarbxr/harmony-mcpRepo rules enforcement for AI agents. Checks diffs against repo conventions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sigasi Magic HDL @sigasi/magic-hdlAnalyze and verify Verilog, SystemVerilog, and VHDL projects from AI agents over MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Veridu @michaelw-pr/veriduCode review that knows what depends on your change — before commit or on every PR.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Stripecheckup @stripecheckup/stripecheckupScan pasted Stripe webhook/checkout code for common integration bugs.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- b612 (hakuto AI) @hakuto-0209/b612Design-review copilot: industry design checkpoints, edge cases, and Japanese legal notes.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Weakspot @weakspot/weakspotAudit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.22% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MiniMindsLab MCP Tools @minimindslab/toolsDeterministic MiniMindsLab utilities for AI agents over MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Strix @strix/strixAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- ReviewGate @reviewgate/reviewgateCode review against your team standards, before the pull request: generator finds, judge confirms6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- SHPBL: Repository Audit & Repair @shpbl/repository-audit-and-repairAudit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Python Code Reviewer @duckdns/python-code-reviewerSecurity + bug + perf + refactor audit for Python. Returns 0-10 score + MD report.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- RTL Lint MCP @jaspresi/rtl-lint-mcpLint Verilog and SystemVerilog files and projects with structured diagnostics.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Council AI @omarkeshk/council-aiMulti-LLM council: 25+ frontier models in parallel, consensus scoring, verdict-first code review.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Architect @hirosecure/architectSecurity reviews for coding agents: diffs checked against your org policy and live infrastructure.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- RepoPilot @repopilot/repopilotRepository evidence for agents before they adopt dependencies, enter codebases, compare, or merge.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Frappe Inspector @belius303/frappe-inspectorStatic analysis tools for Frappe Framework and ERPNext projects via local stdio MCP.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- LeakRank Guard @prototeemo/leakrank-guardScans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
