- BountyVerdict Agent Decision Tools @cristianmoroaica/bountyverdictRead-only GitHub bounty, agent harness, Actions failure, flake, and MCP tool-drift decisions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- UpToCode @ddyrich72/uptocodeEvidence-backed architecture-quality analysis for Python agent applications.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Understand Anything - MCP @uamcp/ua-mcpA powerful MCP server for codebase architecture analysis and automated governance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Voyager Repo @dir-ai/voyager-repoAn AI agent's safe read-only scout to orient in an unknown repository before touching it.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Repotector @dir-ai/repotectorThe repo guardian AI agents handshake with before they touch your code.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CICD AIops @aiops-tools/cicd-aiopsGoverned self-managed GitLab + Gitea CI/CD ops: pipelines, runners, artifacts, RCA. 28 tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Scout Security @varpost/scoutDeterministic, zero-token security scanner your AI agent calls to find and re-verify issues.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Gfi Scout @rajveerx11/gfi-scoutFinds open source issues where beginners actually succeed, ranked by a 0-100 beginner score.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Graneth @graneth/mcp-serverPre-flight check for AI coding agents: hallucinated packages + secrets, 6 ecosystems, no account.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cgraphy @pmgarg/cgraphyCode knowledge graph over MCP: token-budgeted context for AI coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- agentsync @jarmstrong158/agentsyncMulti-agent coordination MCP: claim work, survey peers, resolve conflicts via a git branch as CAS.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Code Atlas @lusiem/code-atlasCode intelligence MCP: symbols, call graphs, change impact + affected tests, routes, search.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Repiscope @3xpr1ment/repiscopeRead-only MCP server: your agent sees all your sibling repos but structurally cannot touch them4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Myopic @surajkgoyal/myopicCode-review MCP: review a GitLab MR or GitHub PR against the whole codebase, not just the diff.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Rami Code Review @rami/ramiAI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- GitInProgress @ysk-abe/gitinprogressGroup your AI's changes into focused commit candidates; nothing lands until you approve.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Git Summary @yifanyifan897645/git-summaryGit repo intelligence: summaries, blame, changelogs, branch health, and history search5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- SignalBrain @whitestone1121-web/signalbrainVerifiable receipts for governed process changes; emit, validate, and gate trust6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- AST Impact Mapper @vola-trebla/ast-impact-mapper-mcpMCP server that uses TypeScript AST to find which tests are affected by a code change3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Release Readiness Triage @vola-trebla/release-readiness-triage-mcpAggregates CI failures, cross-references flakiness history, and outputs GO/NO_GO release verdicts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agora @vorluno/agora-mcpShared per-repo space for Claude Code sessions: see activity, get collision warnings, notes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Batuta @vorluno/batuta-mcpSplit a task into plans with disjoint file boundaries; scaffold a git worktree per plan.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Semamerge @vineethwilson15/semamergeDetects semantic merge conflicts between Git branches using AST-level analysis4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agent Claim @vk0dev/agent-claim-mcpFile-claim coordination for parallel AI coding agents: claim files before edits, no stomping.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
