static-analysis-tool

CodeRef-AI：Vibe Coding 项目的治理外脑 | 安全、健康、变更守护平台 CodeRef AI: The Governance External Brain for Vibe Coding Projects | Security, Health, Change Guard Platform

Security scanner and install-time gate for Agent Skills (Claude Code / Cowork) - detects malicious code, data exfiltration, prompt injection, and supply-chain risk, and quarantines risky skills before you install them.

Aksum — binary security assessment & reverse-engineering framework (ELF/x86-64): identification, disassembly, function discovery, dataflow-corroborated findings

A depth-first, multi-language static scanner that flags wasted work, self-contradiction, and missing escape hatches — and never dresses a heuristic up as a proof. The pons asinorum for code.

Generate layered developer documentation for React, TypeScript, Java, and Spring Boot projects with Markdown and combined PDF output.

AgentGuard VS Code extension — inline agent security diagnostics as you type

CLI tool for finding callers, callees and call paths in source code