Install payload
Install payload is broadly covered in current results.
80% (8/10)
Browse the directory
/
Showing 10 resources for "static-analysis"
Saved
/ search · [ ] view density · esc clear input
Active
9 review · 1 limited in this set — compare to see which signals differ.
Trust snapshot
10 results in this view
Claimed
0%(0/10)
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Adoption queue
Browse adoption queue · balanced
3/10 visible results are in hold tier and need mitigation before adoption.
ready 0caution 7hold 3
Codacy MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/codacy-mcp-server · trust review · confidence 67%
CodeGraphContext MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/codegraphcontext-mcp-server · trust review · confidence 67%
Dart Agent Skills
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/dart-agent-skills · trust review · confidence 67%
jscpd MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/jscpd-mcp-server · trust review · confidence 67%
NVIDIA SkillSpector
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
tools/nvidia-skillspector · trust review · confidence 67%
Roam Code
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/roam-code · trust review · confidence 67%
ShellCheck Static Analysis Hook for Claude Code
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/shellcheck-static-analysis-hook · trust review · confidence 67%
AI Code Review Security Agent - Agents
1 blockers: Metadata review
hold
42/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/ai-code-review-security-agent · trust limited · confidence 67%
Decision confidence
Decision confidence scan · balanced
2/10 results are low-confidence and need review before adoption.
high 0medium 8low 2
Codacy MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/codacy-mcp-server · trust review
CodeGraphContext MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/codegraphcontext-mcp-server · trust review
Dart Agent Skills
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
skills/dart-agent-skills · trust review
jscpd MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/jscpd-mcp-server · trust review
NVIDIA SkillSpector
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
tools/nvidia-skillspector · trust review
Roam Code
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/roam-code · trust review
ShellCheck Static Analysis Hook for Claude Code
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/shellcheck-static-analysis-hook · trust review
AI Code Review Security Agent - Agents
Address Metadata review, Package integrity before broader rollout.
medium
48/100
Missing: Metadata reviewMissing: Package integrity
agents/ai-code-review-security-agent · trust limited
Freshness distribution
Mostly fresh with a few aging entries
Median age 53 days; 9 fresh, 1 aging or stale of 10 scanned.
Oldest entries in this view
Theme distribution
Results center on static-analysis
90% of this view shares the top theme. Leading themes: static-analysis, security, code-review.
- static-analysis90% (9)
- security40% (4)
- code-review30% (3)
- code-quality20% (2)
- agent-skills10% (1)
- agents10% (1)
- ai10% (1)
- bash10% (1)
41 distinct themes across 10 scanned
Codacy MCP Serverby codacy · submitted by davion-knight
The official Codacy MCP server (@codacy/codacy-mcp) that gives AI assistants access to the Codacy API for code quality, security, and coverage — listing repository and pull-request issues, retrieving file coverage and duplication, searching security (SRM) findings, inspecting analysis tools and patterns, and running local analysis with the Codacy CLI.
Official Dart team Agent Skills for AI coding agents working on Dart unit tests, CLI apps, coverage, runtime errors, mocks, package conflicts, static analysis, Native Assets, FFI, ffigen, and pattern matching.
Apache-2.0 security scanner from NVIDIA for AI agent skills, with static pattern checks, optional LLM semantic analysis, MCP least-privilege and tool poisoning analyzers, OSV.dev vulnerability lookups, risk scoring, and terminal, JSON, Markdown, and SARIF reports.
jscpd MCP Serverby Andrey Kucherenko · submitted by oktofeesh1
Copy-paste detection MCP server that scans a codebase and lets AI assistants check snippets, inspect duplication statistics, and review current-directory duplication through jscpd's detection engine.
Roam Codeby Cranot · submitted by oktofeesh1
Local codebase intelligence CLI and MCP server that gives Claude a SQLite code graph, change-safety gates, code health checks, impact analysis, review tools, and audit evidence for agent-assisted coding.
CodeGraphContext MCP Serverby CodeGraphContext · submitted by oktofeesh1
MCP server and CLI toolkit that indexes local code into a graph database so Claude can query functions, call chains, dependencies, and repository structure.
ast-grepby ast-grep · submitted by oktofeesh1
Open-source CLI for structural code search, linting, and rewriting with abstract syntax tree patterns.
Semgrepby Semgrep · submitted by oktofeesh1
Static analysis platform and open-source CLI for finding bugs, security issues, secrets, dependency risk, and custom rule matches in code.
AI-powered code review specialist focusing on security vulnerabilities, OWASP Top 10, static analysis, secrets detection, and automated security best practices enforcement
Read-only Claude Code PostToolUse hook that runs ShellCheck diagnostics after Claude writes or edits shell scripts, reporting shell portability, quoting, expansion, error-handling, and command-safety issues without modifying files.