Sandbox
26 repos for secure-coding · ToolsClear

secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

4k
shivasurya/
code-pathfinder

Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP

140

Open-source AI security scanner for Codex, Claude Code, and ACP-compatible coding agents—kept current with OpenAI Codex Security.

44
KryptosAI/
mcp-observatory

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

146
sinewaveai/
agent-security-scanner-mcp

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

121

Solidity Static Analyzer that easily integrates into your editor

796
awslabs/
iam-policy-autopilot

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

451

Security scanner for AI agents, MCP servers and agent skills.

3k

Runtime intelligence system that makes MCP servers debuggable, testable, and safe to run in production.

48
HuTa0kj/
vetix

Vetix — Automated scanning, identification, and assessment of SKILL security risks.

61

List MCP Server configurations in your system used by AI applications like Cursor, Claude Desktop, VS Code and others

84
Berserk-hub150/
skillhawk

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

30
Kong/
kong

🦍 The API and AI Gateway

44k
stijnswapped/
Myrqen

Security testing that runs inside the coding agent you already use. Source-available, not open source.

158

Privacy Code Scanner and Dataflow Context Engine for AI coding agents

130
affaan-m/
agentshield

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

1.2k
MCP-Defender/
MCP-Defender

Desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf.

257
deckflow/
deckprobe

ffprobe for documents — probe PDF, Microsoft Office, and Apple iWork files without opening them. Rust CLI + browser WASM SDK returning structured JSON with confidence, evidence, and measured I/O cost.

120
NVIDIA/
SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

17k
elliot35/
deterministic-agent-control-protocol

Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTTP API. Works with Cursor, Claude Code, Codex, and any MCP-compatible agent.

88