Directory

Code quality

Reviewed resources in Code quality. 94 resources listed.

94 listings in Code quality

  • Agent Audit

    headyzhang.github.io

    A static security scanner for AI agent code that checks for prompt injection paths, unsafe tool inputs reaching subprocess or eval calls, and MCP configuration mistakes, mapped to the OWASP Agentic Top 10.

  • vbsec

    github.com

    A free security-scanning skill for Claude Code, Codex, and Antigravity that traces data flow through AI-written code to find and explain 21 common vulnerability types.

  • codeindex

    github.com

    A dependency analyzer that builds a temporal knowledge graph of a codebase and scores each file's blast radius, how many other files would break if it changed, so an AI coding assistant can judge the risk of an edit before making it.

  • A static analysis tool that checks source code against more than 1,000 bug patterns across many languages, with machine-readable output designed to wire directly into an AI coding agent's own quality checks.

  • Magento Coding Standard is a set of PHP_CodeSniffer rules that check Magento 2 code against Magento's coding conventions, usable via Composer in a Magento project or as a standalone tool.

  • A GitHub Action and CLI tool that runs automated code reviews using DeepSeek models, commenting directly on pull requests or reviewing local git diffs from the command line.

  • agnix

    github.com

    A linter and language server for AI agent configuration files, validating CLAUDE.md, AGENTS.md, SKILL.md, hooks, and MCP configs against hundreds of rules, with autofixes and editor integrations.

  • zhtw-mcp

    github.com

    A linguistic linter for Traditional Chinese (zh-TW) that plugs into AI coding assistants over MCP and enforces Taiwan Ministry of Education standards on vocabulary, punctuation and character shapes, catching Mainland Chinese regional drift.

  • Bug Hunter

    github.com

    An adversarial code-review skill for AI coding agents in which one role finds possible bugs, a second challenges each claim, and a third decides what the evidence supports, defaulting to a scan-only, single-pass report.

  • Roam

    roam-code.com

    A local CLI and MCP server that gives coding agents a reusable codebase index: connections between files and functions, pattern findings with alternatives, and checks they can run as they work, without an account or API key.

  • A Claude Code plugin with 26 specialist agents and enforced coding rules for Elixir, Phoenix and LiveView projects, planning, implementing, reviewing and verifying changes in parallel and integrating with the Tidewave MCP server.

  • A CLI-distributed library of coding standards and SDLC skills for AI coding agents across many languages and frameworks, syncing versioned rules into tools such as Cursor, Claude Code, Copilot, Gemini and Windsurf.

  • SonarQube MCP Server

    sonarsource.com

    SonarQube MCP Server is an official Model Context Protocol server that connects an AI coding agent to SonarQube Server or SonarQube Cloud for code quality and security analysis, including snippets analyzed directly in the agent's context.

  • A collection of specialized Claude Code agent definitions for code review, implementation verification, testing and quality assessment, each packaged as a single markdown configuration file.

  • Slopo

    slopo.dev

    A command-line tool that uses code-embedding models to find near-duplicate implementations across a codebase, catching similar-but-not-identical logic that coding agents and reviewers tend to miss.

  • Axon

    harshkedia.com

    A code-intelligence engine that indexes a codebase into a structural knowledge graph of dependencies, call chains and clusters, browsable in an interactive dashboard or queried by an AI agent through MCP tools.

  • OpenSwarm

    github.com

    An agentic CI/CD gate that reviews a code diff, fixes confirmed findings in sandboxes, re-reviews the result, and requires passing repository checks before it opens a pull request.

  • A Claude Code plugin marketplace that packages a skill teaching an agent to use ast-grep's abstract-syntax-tree pattern matching for structural code search instead of plain text search.

  • vize

    vizejs.dev

    An experimental, Rust-native toolchain for Vue.js that shares one parser across compilation, linting, type-checking, formatting and editor tooling.

  • The Agentics

    github.com

    A sample pack of reusable GitHub Agentic Workflows covering repository maintenance, CI fault analysis, code review and research or status reporting.

  • A collection of PHP_CodeSniffer sniffs that improve the safety and behavior of PHP code, detect dead code, and enforce consistent formatting.

  • Patchwork

    patched.codes

    A self-hosted CLI agent framework that automates development chores such as PR reviews, bug fixing and security patching by combining reusable steps, prompt templates and an LLM.

  • PR Lens

    prlens.dev

    A GitHub App, Action, CLI and coding-agent skill that draws each pull request as an animated architecture and data-flow diagram, posted directly inside the pull request.

  • laminas-code

    docs.laminas.dev

    A PHP library that extends the PHP Reflection API with static code scanning and an object-oriented code generator for creating and updating PHP source, extensible to other output formats.