Directory
Code quality
Reviewed resources in Code quality. 94 resources listed.
Agent Audit
headyzhang.github.ioA static security scanner for AI agent code that checks for prompt injection paths, unsafe tool inputs reaching subprocess or eval calls, and MCP configuration mistakes, mapped to the OWASP Agentic Top 10.
vbsec
github.comA free security-scanning skill for Claude Code, Codex, and Antigravity that traces data flow through AI-written code to find and explain 21 common vulnerability types.
codeindex
github.comA dependency analyzer that builds a temporal knowledge graph of a codebase and scores each file's blast radius, how many other files would break if it changed, so an AI coding assistant can judge the risk of an edit before making it.
Ultimate Bug Scanner
github.comA static analysis tool that checks source code against more than 1,000 bug patterns across many languages, with machine-readable output designed to wire directly into an AI coding agent's own quality checks.
Magento Coding Standard
github.comMagento Coding Standard is a set of PHP_CodeSniffer rules that check Magento 2 code against Magento's coding conventions, usable via Composer in a Magento project or as a standalone tool.
DeepSeek Code Review
github.comA GitHub Action and CLI tool that runs automated code reviews using DeepSeek models, commenting directly on pull requests or reviewing local git diffs from the command line.
agnix
github.comA linter and language server for AI agent configuration files, validating CLAUDE.md, AGENTS.md, SKILL.md, hooks, and MCP configs against hundreds of rules, with autofixes and editor integrations.
zhtw-mcp
github.comA linguistic linter for Traditional Chinese (zh-TW) that plugs into AI coding assistants over MCP and enforces Taiwan Ministry of Education standards on vocabulary, punctuation and character shapes, catching Mainland Chinese regional drift.
Bug Hunter
github.comAn adversarial code-review skill for AI coding agents in which one role finds possible bugs, a second challenges each claim, and a third decides what the evidence supports, defaulting to a scan-only, single-pass report.
Roam
roam-code.comA local CLI and MCP server that gives coding agents a reusable codebase index: connections between files and functions, pattern findings with alternatives, and checks they can run as they work, without an account or API key.
Elixir Phoenix Plugin for Claude Code
phxagents.devA Claude Code plugin with 26 specialist agents and enforced coding rules for Elixir, Phoenix and LiveView projects, planning, implementing, reviewing and verifying changes in parallel and integrating with the Tidewave MCP server.
Agent Skills Standard
github.comA CLI-distributed library of coding standards and SDLC skills for AI coding agents across many languages and frameworks, syncing versioned rules into tools such as Cursor, Claude Code, Copilot, Gemini and Windsurf.
SonarQube MCP Server
sonarsource.comSonarQube MCP Server is an official Model Context Protocol server that connects an AI coding agent to SonarQube Server or SonarQube Cloud for code quality and security analysis, including snippets analyzed directly in the agent's context.
Claude Code Agents Collection
github.comA collection of specialized Claude Code agent definitions for code review, implementation verification, testing and quality assessment, each packaged as a single markdown configuration file.
Slopo
slopo.devA command-line tool that uses code-embedding models to find near-duplicate implementations across a codebase, catching similar-but-not-identical logic that coding agents and reviewers tend to miss.
Axon
harshkedia.comA code-intelligence engine that indexes a codebase into a structural knowledge graph of dependencies, call chains and clusters, browsable in an interactive dashboard or queried by an AI agent through MCP tools.
OpenSwarm
github.comAn agentic CI/CD gate that reviews a code diff, fixes confirmed findings in sandboxes, re-reviews the result, and requires passing repository checks before it opens a pull request.
A Claude Code plugin marketplace that packages a skill teaching an agent to use ast-grep's abstract-syntax-tree pattern matching for structural code search instead of plain text search.
vize
vizejs.devAn experimental, Rust-native toolchain for Vue.js that shares one parser across compilation, linting, type-checking, formatting and editor tooling.
The Agentics
github.comA sample pack of reusable GitHub Agentic Workflows covering repository maintenance, CI fault analysis, code review and research or status reporting.
Slevomat Coding Standard
github.comA collection of PHP_CodeSniffer sniffs that improve the safety and behavior of PHP code, detect dead code, and enforce consistent formatting.
Patchwork
patched.codesA self-hosted CLI agent framework that automates development chores such as PR reviews, bug fixing and security patching by combining reusable steps, prompt templates and an LLM.
PR Lens
prlens.devA GitHub App, Action, CLI and coding-agent skill that draws each pull request as an animated architecture and data-flow diagram, posted directly inside the pull request.
laminas-code
docs.laminas.devA PHP library that extends the PHP Reflection API with static code scanning and an object-oriented code generator for creating and updating PHP source, extensible to other output formats.