- prodlint @prodlint/prodlintProduction readiness for vibe-coded apps. 52 checks for security, reliability, and performance.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
- Girder @dhishwasher/girderSaves AI coding-agent context by giving exact code instead of whole files, from a local graph.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
- Mergewarden @sjh9714/mergewardenCheck whether a coding agent's changes stayed inside the scope it was given.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.13 GitHub stars.
- Clairvoyance @clairvoyance/mcpSoftware design skills for AI coding agents, inspired by A Philosophy of Software Design.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.12 GitHub stars.
- Kagan @kagan-sh/kaganAI-powered Kanban TUI for autonomous development workflows with agent orchestration5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.12 GitHub stars.
- AIContextBuilder @gregordadera/aicb-roslyn-mcpSymbol-aware C# and .NET code context for AI coding assistants.Not assessed yet.Runs on your machine, installed from NuGet.11 GitHub stars.
- AIContextBuilder @gregordadera/aicbSymbol-aware C# and .NET code context for AI coding assistants.Not assessed yet.Runs on your machine, installed from NuGet.11 GitHub stars.
- Analyzer @anselmoo/mcp-server-analyzerMCP server for Python, JavaScript, and TypeScript code analysis with Ruff, ty, Vulture, and Biome3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
- Grok @howardpen9/grok-mcpUse xAI Grok as a peer reviewer + PR gate from Claude Code, Cursor, Cline and any MCP host.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.11 GitHub stars.
- Orchestrator @crak1644/orchestrator-mcpLet one coding-agent CLI consult another: Codex, Claude Code, OpenCode, Copilot or Antigravity.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
- Prism @shailesh200/prismLocal-first repo intelligence for agents: DNA, health, blast radius, and Dispatch jobs.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Fw Context @turbyho/fw-context-mcpBuild-aware code intelligence for embedded C/C++ firmware — libclang, FTS5, call graphs, 33 tools4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.10 GitHub stars.
- Mason @adrianczuczka/masonEngineering decisions, change impact, documentation audits, and CI evidence for coding assistants.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Postbag @parasxos/postbagLocal Claude Code and Codex sessions on one machine exchange letters through native inputs.Not assessed yet.Runs on your machine, installed from PyPI.9 GitHub stars.
- Trent @trent/trentSecurity reviews, threat models over a repo or website, and remediation tracking, in your editor.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.9 GitHub stars.
- Deed @deed-lang/deedContract-first language and MCP server for capability-aware code and patch review.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.9 GitHub stars.
- Gerrit Code Review @gaijin/go-gerrit-mcpCapability-gated Gerrit code review tools with opt-in review notifications pushed into the session3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.9 GitHub stars.
- GitLab @dubuqingfeng/gitlab-mcp-serverGitLab MCP (Model Context Protocol) server for AI agents6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.9 GitHub stars.
- Docvet @alberto-codes/docvetDocstring quality vetting for Python -- enrichment, freshness, coverage, and presence checks2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.9 GitHub stars.
- Migrationpilot @mickelsamuel/migrationpilot112 rules that catch dangerous PostgreSQL migrations, plus a pass/fail gate to call before any DDL.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
- Code Auditor @benahammond/code-auditor-mcpEnforces architectural invariants and code quality rules inside your AI agent's edit loop.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.8 GitHub stars.
- Pi Durabletask MCP @nyarlathoteppppp/pi-durabletask-mcpDelegate Claude/Codex tasks to configured Pi, with steering and optional SQLite restart recovery.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- Archprint @tommkruix/archprintMine the architecture rules your TypeScript repo already enforces, with the evidence attached.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- Athena Protocol @n0zer0d4y/athena-protocolAI tech lead for coding agents with validation and impact analysis9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
