✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.

Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

Security Scanner for Agent Skills

Solidity Static Analyzer that easily integrates into your editor

Trivy plugin for starting an MCP server

Collection of agent skills to find vulnerabilities inside your web/mobile apps.

Vetix — Automated scanning, identification, and assessment of SKILL security risks.

Agent Skill for PHP security audits - OWASP patterns, vulnerability detection | Claude Code compatible

Agent skill for producing threat models for open-source projects

Plugin for JADX to integrate MCP server

MCP server for JADX-AI Plugin

Privacy Code Scanner and Dataflow Context Engine for AI coding agents

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

SAIL V2 (Secure AI Lifecycle) as an agent skill — the full 91-risk catalog for AI/agent gap assessments, security roadmaps, and compliance checklists. Installs on Claude Code, Codex, ChatGPT, Antigravity, and any SKILL.md-compatible agent.

Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTTP API. Works with Cursor, Claude Code, Codex, and any MCP-compatible agent.