Install payload
Install payload is broadly covered in current results.
78% (7/9)
Browse the directory
/
Showing 9 resources for "static-analysis"
Saved
/ search · [ ] view density · esc clear input
Active
Source-backed filter active — add entries to compare trust side by side.
Trust snapshot
9 results in this view
Claimed
0%(0/9)
1 trust signal differs in this sample: Submitter
Signals differ on Submitter — add entries to compare before you install.
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Adoption queue
Browse adoption queue · balanced
2/9 visible results are in hold tier and need mitigation before adoption.
ready 0caution 7hold 2
Codacy MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/codacy-mcp-server · trust review · confidence 67%
CodeGraphContext MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/codegraphcontext-mcp-server · trust review · confidence 67%
Dart Agent Skills
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/dart-agent-skills · trust review · confidence 67%
jscpd MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/jscpd-mcp-server · trust review · confidence 67%
NVIDIA SkillSpector
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
tools/nvidia-skillspector · trust review · confidence 67%
Roam Code
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/roam-code · trust review · confidence 67%
ShellCheck Static Analysis Hook for Claude Code
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/shellcheck-static-analysis-hook · trust review · confidence 67%
ast-grep
2 blockers: Metadata review, Install payload
hold
36/100
Request metadata review from maintainers or internal owners.
Add install/config payload for reproducible team rollout.
Collect package checksum or signed artifact information.
tools/ast-grep · trust review · confidence 50%
Decision confidence
Decision confidence scan · balanced
2/9 results are low-confidence and need review before adoption.
high 0medium 7low 2
Codacy MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/codacy-mcp-server · trust review
CodeGraphContext MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/codegraphcontext-mcp-server · trust review
Dart Agent Skills
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
skills/dart-agent-skills · trust review
jscpd MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/jscpd-mcp-server · trust review
NVIDIA SkillSpector
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
tools/nvidia-skillspector · trust review
Roam Code
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/roam-code · trust review
ShellCheck Static Analysis Hook for Claude Code
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/shellcheck-static-analysis-hook · trust review
ast-grep
Hold adoption until Metadata review, Package integrity are resolved.
low
36/100
Missing: Metadata reviewMissing: Package integrityMissing: Install payload
tools/ast-grep · trust review
Freshness distribution
Current results are broadly fresh
Median age 52 days; all 9 scanned entries are within 90 days.
Theme distribution
Results center on static-analysis
89% of this view shares the top theme. Leading themes: static-analysis, security, code-quality.
- static-analysis89% (8)
- security33% (3)
- code-quality22% (2)
- code-review22% (2)
- agent-skills11% (1)
- agents11% (1)
- bash11% (1)
- claude-code11% (1)
39 distinct themes across 9 scanned
Codacy MCP Serverby codacy · submitted by davion-knight
The official Codacy MCP server (@codacy/codacy-mcp) that gives AI assistants access to the Codacy API for code quality, security, and coverage — listing repository and pull-request issues, retrieving file coverage and duplication, searching security (SRM) findings, inspecting analysis tools and patterns, and running local analysis with the Codacy CLI.
Official Dart team Agent Skills for AI coding agents working on Dart unit tests, CLI apps, coverage, runtime errors, mocks, package conflicts, static analysis, Native Assets, FFI, ffigen, and pattern matching.
Apache-2.0 security scanner from NVIDIA for AI agent skills, with static pattern checks, optional LLM semantic analysis, MCP least-privilege and tool poisoning analyzers, OSV.dev vulnerability lookups, risk scoring, and terminal, JSON, Markdown, and SARIF reports.
jscpd MCP Serverby Andrey Kucherenko · submitted by oktofeesh1
Copy-paste detection MCP server that scans a codebase and lets AI assistants check snippets, inspect duplication statistics, and review current-directory duplication through jscpd's detection engine.
Roam Codeby Cranot · submitted by oktofeesh1
Local codebase intelligence CLI and MCP server that gives Claude a SQLite code graph, change-safety gates, code health checks, impact analysis, review tools, and audit evidence for agent-assisted coding.
CodeGraphContext MCP Serverby CodeGraphContext · submitted by oktofeesh1
MCP server and CLI toolkit that indexes local code into a graph database so Claude can query functions, call chains, dependencies, and repository structure.
ast-grepby ast-grep · submitted by oktofeesh1
Open-source CLI for structural code search, linting, and rewriting with abstract syntax tree patterns.
Semgrepby Semgrep · submitted by oktofeesh1
Static analysis platform and open-source CLI for finding bugs, security issues, secrets, dependency risk, and custom rule matches in code.
Read-only Claude Code PostToolUse hook that runs ShellCheck diagnostics after Claude writes or edits shell scripts, reporting shell portability, quoting, expansion, error-handling, and command-safety issues without modifying files.