- Gadriel AI Security Harness @gadriel-ai/gadrielAI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- DevOps & Cloud Code Auditor @ansarii/devops-code-auditorDetects database migration table locks, terraform cost leaks, and OWASP API flaws.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- MCP Security & Vulnerability Auditor @ansarii/mcp-security-auditorStatic AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Jade @julianbei/jadeThe IDE for agents: read by symbol, edit against a revision, validate with your own build, revert.Not assessed yet.Runs on your machine, installed from Docker.
- Codebahn @codebahn/codebahnCodebahn is the private GitHub alternative: fast Git and CI for developers and teams.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- The Deployer @thedploy/deployerCheck if a repo will deploy, plan a deploy to your own cloud, and see status, logs and redeploys.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- SlopScore @slopscore/slopscoreBrowse, search and scan a public leaderboard of AI-generated GitHub repos.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Memory for AI @lonelytraderbay/memory-for-aiLocal codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Gitee MCP Server @paulseth/gitee-mcp-server让 AI 用自然语言管理 Gitee 仓库：查 star、管 Issue、基于 commit 生成中文 CHANGELOG（原生无此 API）6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- oss-search @sblattj/oss-searchFast local and federated OSS code search and repo discovery for AI agents3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Glitch Toolkit @abstractglitch/glitch-toolkitRead-only checks that fail a guardrail which is present but has stopped refusing anything5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- nittim @nittim/nittimProduction-safety audits for AI-generated code, with a fix for every finding.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Symvanta @symvanta/code-graphHosted code graph over MCP: exact callers, dependencies, and cross-repo blast radius for AI agents.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Feldspar free repository security scan @project-feldspar/scanFree deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Standup Mr @jubstaaa/standup-mrStandup notes from merge request state, with the failed job's error lines.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Code Relay @zarcherlot/code-relayBranch-scoped runbooks, remote checkpoints, and auditable verification receipts.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- VulX Watch @vulx/watchIndependent security review for AI-built apps. Watch a GitHub repo. Never a patch.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Koda @aabxtract/kodaVerification and memory layer for coding-agent workflows.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sippion @sitten-tokyo/sippionLocal read-only repository context retrieval for AI coding agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Course Drift Oracle @710git/course-drift-oracleSigned drift reports for the ai-agents-for-beginners course. Free summary; $0.25 full report.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- katra @craigjmidwinter/katraA committed markdown dev log and task graph that agents read and write over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Axis Iliad — Codebase Intelligence For Agentic Commerce @lastmanupinc-hub/axis-toolboxCodebase intelligence for agents: 152 structured artifacts across 21 programs, one call.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Bitbucket @droplinkperformance/bitbucket-mcp-serverProvider-agnostic, AI-review-first MCP server for Bitbucket Cloud.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- GitHub Organization Signal Scanner @mambabuilt/mcp-github-organization-signal-scannerResolve a company domain to its GitHub organization with repo, language and activity signals.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
