- archy @hslee16/archyArchitectural sensor for Python codebases.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Decantr Ai MCP @decantr-ai/mcp-serverStable eight-tool MCP server for changed-UI assurance, authority-aware UI task context, and repair.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- Judges Panel @kevinrabun/judges45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.7 GitHub stars.
- HefestoAI @artvepa80/hefestoaiPre-commit code quality guardian. Detects semantic drift in AI-generated code.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.7 GitHub stars.
- Jev agent tools @nomenak/jev-agent-toolsEvidence-oriented code questions, diff review and test selection via a Jev endpoint.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Code Factory @zrk222/code-factoryLocal audit evidence for agents: source, workflows, runtime, repair and native scanner status.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- culprit @noordeen123/culpritDeterministic, offline root-cause analysis and pre-commit fix verification for coding agents.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- diffctx @nikolay-e/diffctxSelects the minimum code an LLM needs to review a git diff3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- Sqlike @orifisher2/sqlike-mcpLints SQL and checks rewrites return the same rows. Postgres, MySQL, MariaDB, SQLite, MSSQL, DuckDB4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- GitLab @vish288/mcp-gitlabGitLab MCP server for MCP 2026-07-28: projects, MRs, files, reviews, pipelines, CI/CD, issues5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- FedRAMP 20x Requirements @kevinrabun/fedramp20xmcpAn MCP server that provides access to FedRAMP 20x security requirements and controls.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
- GitHub PR Issue Analyser @smithery/saidsef-mcp-github-pr-issue-analyserA Model Context Protocol (MCP) application for automated GitHub PR analysis and issue management.…7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.6 GitHub stars.
- Norma by Quality Clouds @qualityclouds/normaChecks AI-written code against your rules as it is written, and keeps a record of what it found.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.5 GitHub stars.
- Diffgate @srbsa/diffgateDeterministic guardrail your coding agent runs on itself: diff-scoped findings, zero LLM tokens.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- Coding Standards @corbat-tech/coding-standardsAI coding standards that enforce production-grade code with DDD, SOLID, TDD guardrails.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- DiffPilot @bkalafat/diffpilotMCP server for PR code review, commit messages, changelogs, and secret detection.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.5 GitHub stars.
- SFMC @joernberkefeld/mcp-server-sfmcSFMC AMPscript/SSJS/GTL tools + searchable help for 7 MC products (Engagement, Pardot…) via MCP.2% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- nomArmy @rayson-tech/nomarmySandboxed coding workers, verified: tests rerun fresh and must fail with the change reverted.Not assessed yet.Runs on your machine, installed from npm.4 GitHub stars.
- Flyto Indexer @flytohub/flyto-indexerCode intelligence MCP server — impact analysis, semantic search, dependency graphs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Weavatrix @weavatrix/weavatrixNative Weavatrix MCP: 67 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- ReviewGuard @eclipsesource/review-guardSafety boundary for agent written GitHub PR reviews: pending and invisible, submitting is opt-in3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Tenant Isolation @subodhkc/mcp-tenant-isolationStatic analysis scanner for MCP server code and multi-tenant SaaS applications.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- ABAPilot @nicohern/abapilot-mcpABAP MCP connector for SAP ECC and on-premise S/4HANA. Requires a licensed ABAPilot backend.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Hivelore @doucs91/hiveloreDeterministic gate: blocks any commit whose diff reintroduces a documented team mistake.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
