DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

Source Code Security Audit (源代码安全审计)

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.

Open-Source Security Reports, Made Simple - 100% free. No paywalls, just actionable insights.

sdlc_python 是一个基于python语言构建的devsecops平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识(对应sdlc中对开发人员的安全培训)，并且使用了大模型进行代码安全审计（对应sdlc中代码审计阶段），帮助企业进行安全左移。除了用于 DevSecOps 实践外，sdlc_python 还可以用于学习漏洞知识、渗透测试和代码审计。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Flask，而前端则使用了 Vue 3。

🐛 A plug-in of sublime 2/3 which is able to find PHP vulnerabilities

Codeaudit - Modern Python source code security analyzer based on distrust.

Agent Skill: Architecture-level cross-stack source code asset scanner. Know what you have before you refactor. | 架构级跨技术栈源码资产扫描工具

Claude Code workflow for mapping projects into clean-room behavior docs, file maps, batch reports, verification, and rebuild-ready blueprints.

顾名思义，一个代码的数据库....

👁️ LLM-native static vulnerability detection. An LLM reads your source like a human auditor, point it at any local folder or repo and get a reviewable vuln report. Auto-enriched prompts, adversarial validation, opt-in fix-verify. Runs on Claude Code / Codex / local OSS. Bug-bounty triage is one mode. Detection-only, read-only.

A CVE-oriented multi-agent code audit system implemented as a Claude Code skill. It orchestrates parallel subagents to discover exploitable vulnerabilities in git repositories, write weaponized POCs, verify them against live deployments, and generate CVE-ready reports.

Language- and framework-agnostic audit checklists for AI coding agents — security, correctness, and operability. Works with Claude Code, GitHub Copilot, Cursor, Codex CLI, OpenCode, and any agent that can read files.

Local-first production-readiness system for AI-built apps: read-only audit, evidence-based 0-100 score, guided fixes, learning plan, dashboard, CLI, and MCP.

PHP/Java/Python/Go/.NET 多语言代码审计 Codex Skill：Source-to-Sink 证据链、PoC、修复建议、CNVD/CVE 提交型漏洞报告

AUDIT.md — an honest, self-improving audit protocol for AI coding agents. Evidence-gated, eval-regressed, AI-agnostic. By CyberSkill.

An LLM-orchestrated, evidence-graded code-quality audit framework for Laravel — 15 dimensions, real tools, no hallucinated metrics.

Token Efficiency Toolkit — Reduce AI token consumption with proven patterns, local hardware acceleration, and smart workflows

Python Code Quality Analyzer — 9 checks, SSH audit, auto-fix, SARIF, CI/CD — 20+ contributors