- Slop Patterns @sloppatterns/slop-patternsChecks UI code for AI-default design patterns and gives the fix. By Precious Studio.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- onsystem @dgesteves/onsystemKeeps coding agents on your design system: knows your real components, props, variants and tokens.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Design System MCP @dgesteves/design-system-mcpGround truth about your React design system for coding agents, plus a UI linter they can run.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Unicode-LE @nolindnaidoo/unicode-leFind the Unicode that hides meaning: bidi controls, invisibles, homoglyphs and mixed scripts.Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Contribos @adityatiwari101104/contribosHelp open-source contributors earn maintainer trust: repo rules, briefs, and pre-submit checks.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Code Quality @ryudi84/code-qualityMCP server for code quality: complexity, duplicates, naming, refactoring.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- AI Disclosure Lint Sb942 @jmshinhwa/ai-disclosure-lint-sb942Finds the generative-AI code that drops the disclosures California SB 942 has required since August7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Ai Model Retirement Lint @jmshinhwa/ai-model-retirement-lintFinds the LLM model IDs pinned in your code that vendors have already switched off, or have dated to4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Skimless @pedroofrancaa/skimlessReading order for big pull requests: what to read first, what can wait. Offline, no model.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Predictive Debugger @speedosdk/predictive-debuggerPredicts where JavaScript and TypeScript code will fail at runtime, for coding agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- CodeZaiku @wyrdsekai/codezaikuA coding and development harness on local models or hosted APIs, for code, review, research and ops.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- SecHelix @omarmohelal/sechelixEvidence-first security review of authorized repositories. Read-only, root-confined, no shell.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- HEIDES @abduljabbarbxr/heidesDeterministic code analysis harness giving AI agents senses, memory and judgment for code.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- crapkit @jeanfrancoisgagne/crapkitTwelve tools to inspect CRAP scores, find work, and check edited functions against their ceiling.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- ThinkReview @thinkode/thinkreviewLive PR/MR code reviews via review_url_code. OAuth or portal Bearer auth.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- Signalint @tranqui004/signalintLocal stdio MCP server for cached, loop-aware JS/TS diagnostics (Oxlint, tsc, Biome, ESLint).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Scopewalker @timohaa/scopewalker-mcpCodebase analysis tools for AI agents: complexity, prop drilling, doc coverage, code smells.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Verificate MCP @verificate/mcpAgentic code review, no signup to try: reality gates + frontier-model review, with veto.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Evidrift @bm1016bm-svg/evidriftCatch TypeScript API and OpenAPI contract drift in AI-generated code, then revalidate it in CI.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Agentic SDLC MCP @sakuracianna/agentic-sdlc-mcpAgentic SDLC governance and security controls for AI coding agents working with GitHub.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- ReSharper CLI @andypgray/resharper-cli-mcpReSharper CLI inspection/cleanup via MCP. Unofficial: not affiliated with or endorsed by JetBrains.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.1 GitHub stars.
- Unwritten @byggarepop/unwrittenCatches files and C# members you forgot to change, learned from your repo's git history3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.1 GitHub stars.
- Research Repo Doctor @tom409114/rrdoctorDeterministic Artifact Evaluation preflight and run-path grader for research repositories.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Arkgate @pedroknigge/arkgateWhen the agent writes a bad import, the write doesn’t land. The same check fails the pull request.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
