#Code Quality
200
2026-09-27
dzhng/jevgrep
S
Find code by asking what it does. A CLI for coding agents that uses Jev to discover relevant files and source context.
2026-09-25
Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design
S
Hello! We’re Sid, Alex, Ketan, and Milan. We’re building Whiteboard ( https://whiteboard.dev.fast/), an open-source desktop app where humans and agents can architect software together in a common workspace. Here’s our repo: https://github.com/devdotfast/whiteboard. We were missing the feeling of a “whiteboard session” with another dev where you leave with a deep understanding of a system, so we built this app for ourselves. Whiteboard plugs into the tools you already use - e.g. Claude Code, Codex, etc. – and gives your agent an SDK to draw on an in-app canvas to describe its work. We began with an MVP based on HTML artifacts and started rethinking the app as we ran into limitations: 1. Built on top of CodeOSS: We found that in pure HTML tools it was hard to connect a spec or diagram to code. In Whiteboard, when you click on visualizations like a sequence diagram, an entity relationship diagram, or a quote from the agent’s trace, you can jump to the underlying code directly. When navigating code, you get keybindings and LSP support from VSCode out of the box. We’ve found this is especially valuable because tradeoffs are often only discovered after a first pass at implementation (re: slop) 2. Semantic diff viewer: we wrote a semantic, AST-aware diff viewer in Rust so you can only view the code changes which are relevant to you [1]. We’ve set up some sane defaults: large added functions are summarized as pseudocode, and things like unit tests and large documentation changes are collapsed / hidden. This is all customizable with a WASM-based plugin system. 3. Decision Log: We found it difficult to reason about what set of decisions our agents made autonomously. So we built tools for agents to query and link their own traces to the Whiteboard, so you can understand how the requirements that you set were implemented, and understand what decisions your agent made autonomously. Here’s a quick demo video explaining more: https://www.youtube.com/watch?v=ChPn3ftULWE Folks at companies like Salesforce and Modal are using Whiteboard today as a review tool for architecture or spec-level changes – really any change where they want to be involved: 1. Reviewing your own coding agent’s work: because Whiteboard makes it easier to review large amounts of code, folks will typically have their AI agents create a prototype and a corresponding Whiteboard session so they can iterate on the design. 2. Reviewing other people’s changes: We’ve found that Whiteboard is particularly helpful when composed with tools like Greptile. For example, you can run an automated code reviewer on small changes and escalate to a Whiteboard session for the changes that require human judgement. Why we built this: we’re four buddies from college who quit our jobs as tech leads right before agentic coding became industry standard. As we iterated towards an MVP for a previous idea, we struggled to maintain a comprehensible codebase while reaping all the velocity benefits of agentic coding. As more PRs were merged without our understanding, we felt a ‘cognitive debt’ begin to seep in, until it became difficult for us to even contribute to the system [2]. We’re releasing our desktop app under an MIT license. Please poke through and feel free to contribute! Eventually we’ll charge companies for a hosted web version that manages whiteboard session creation alongside features like trajectory storage and multiplayer reviews. Everything will always remain self-hostable. Thanks for reading, and we hope you try it out! We would love to hear any feedback and to learn from your expertise. Here’s are the project links again: https://github.com/devdotfast/whiteboard, and you can install (for MacOS + Linux) at https://install.dev.fast [1] diffs library: https://github.com/devdotfast/diffr [2] Credit for the term ‘cognitive debt’ goes to https://www.geoffreylitt.com/2026/07/02/understanding-is-the...
2026-09-22
Show HN: Foremerge – Catch intent conflicts between parallel coding agents
S
At, GPTree, we run several coding agents across our team on one repo using parallel worktrees. Apart from wasted time reviewing and fixing conflicts at PR time, the failures that hurt the most are when multiple plans or tickets cause architecture changes that cannot both be true. Ex. one agent replaces a class while another one is in the process of extending it. Git only notices if the resulting patches happen to touch the same lines and the review only catches it if they are familiar with both tickets. Foremerge is a local "git like" coordination layer that sits above git (ie. does not interact with or change the way git and worktrees function), Before editing each agent publishes an intent and the scopes it will change, with the operation it plans to complete on each one. foremerge intent publish --agent "$A" \ --summary "Replace PaymentService with StripePaymentService" \ --scope symbol:PaymentService=replace foremerge intent publish --agent "$B" \ --summary "Add PayPal support to PaymentService" \ --scope symbol:PaymentService=extend The publish by the 2nd agent returns a HIGH destructive_vs_additive finding before writing any code. Agents keep their own worktrees and the shared state is one SQLite file in gits common direectory. No hooks, no merge drivers, nothing rewrites your history. It ships as one Rust binary with a CLI and MCP server with 18 tools and `foremerge setup all` wires it into Claude Code, Codex and Cursor. Because the protocol has nothing provider specific, a Claude agent and a Codex agent coordinate through the same store. Before any work is accepted, Foremerge runs a named check that you configured against the exact git state of the change. An agent that says tests pass is recorded but it dosnt satisfy the acceptance gate without running the check itself. Detection is deterministic, no judge model reading your code. HIGH conflicts are only asserted for declared operations, ie. matches inferred from prose cap out below high. Claims are advisory leases, not locks so two agents can still hold the same scope without deadlock. The open source version is single matching and so not a distributed consensus. We have tested this up to 98 parallel agents all working on the same repo with zero conflicts (was supposed to be 100 but 2 agents failed to run due to resource limitations) I replayed 76 intents on my own agents from a build last week in the order they happened. The sample had exactly 1 conflict (which was flagged) and the review found a blind spot where one agent claimed scope by class name and the other claimed it by an internal method. We are working on fixing that for the next release. Setup is a 30s install by pasting the quickstart instructions from the readme.md into your agent or manually: `curl -fsSL https://foremerge.com/install.sh | sh` or `cargo install --locked foremerge`, then `foremerge init && foremerge setup all` in a repo. Apache-2.0. The feedback I want most is which conflicts between your agents plans would you actually want flagged and which would you tollerate as noise? Repo here: https://github.com/naw103/foremerge Website: https://foremerge.com More information on the problems this solves: https://foremerge.com/blog/
2026-10-23
colinhacks/reylo
S
Import .sql files into TypeScript with full type inference and zero codegen.
2026-10-19
Show HN: Sphinx – A hook that quizzes you on your AI's code before shipping
A
FOSS, Basically it plugs into your existing coding agent workflow and every time you push to prod it'll throw up a questionnaire that checks if you understand how the code you're pushing works.
2026-09-25
Show HN: Canary (YC) – Independent verification for AI code
A
Hey HN, we are Aakash and Viswesh and we are building Canary ( https://www.runcanary.ai/) - independent verification for AI code. Claude/Codex calls Canary with the changesets, intended behaviour and team knowledge. Canary then deploys agent swarms to investigate potential failures and test suspected runtime bugs in remote sandboxes. To try it on your repository, paste this into your coding agent: Install the Canary CLI with npm i -g @runcanary/cli, then run canary skills and follow its instructions to onboard this repository. Verification starts with what software is supposed to do and most importantly what it must never allow. This means investigating how inputs, permissions, state, timing, dependencies etc interact with each other. Intent is not always fully declared as well but many expectations are clear: private files should stay private, credentials should not leak, and retries should not create unintended duplicate effects. We believe the future is a unified and independent verification system that starts with all those expectations and then chooses how to investigate each suspected failure. Source-only code reviews catches static issues in the implementation but even a clean review leaves a good chunk of behavioral only issues untested. Unit tests, integrations, E2E, static analysis, runtime experiments and formal verification are all means to establish that behavior thereby generating different kinds of evidence and guarantees. This is why we believe a dedicated verification harness that can think and reason through all these modalities and invariants is necessary on top of general intelligence. The harness needs to start with the system’s intended behavior, develop a series of potential failure scenarios and choose how to investigate them. It’s sole functionality is to pressure test and challenge the assumptions behind a change, create the conditions needed to test suspected failures and assess what the resulting evidence establishes How Canary works: it takes a cold snapshot of the codebase when called, combining the supplied intent and team knowledge with requirements, decisions, prior issues from tools like Notion, Linear. It can also route questions to you through the coding agents if anything is ambiguous. Canary’s harness coordinates agent swarms by leveraging the different strengths across model families. It compares the code before and after, traces the effects through callers, dependencies, state transitions etc. and each suspected failure becomes a concrete scenario with an actor, state, trigger, outcomes and many more runtime states., For each suspected failure, Canary chooses the best way to provide evidence through methods like runtime verification, static analysis, unit, integration or sometimes even combination of these as necessary. The agent executes these checks in remote sandboxes by seeding data, configuring permissions, mocking dependencies and third party integrations and much more. Canary then returns these findings and supporting evidence back to the coding agents which then fixes these failures and requests reverifications against the failed scenarios. To get started, give your coding agent this setup instruction and tell us what it caught and how we can do better. Install the Canary CLI with npm i -g @runcanary/cli, then run canary skills and follow its instructions to onboard this repository. We are still pretty early in our journey and would love feedback on the product and how we can do better.
2026-10-21
Umair/stalemap
S
Tell your coding agent which dependencies changed after its training cutoff. Diffs types and changelogs, writes a short block into AGENTS.md / CLAUDE.md.
2026-09-09
Lakr233/maintainable-update
A
Repo-wide maintainability sweep: copy, clarity, wrap, width, split, rename, tidy
2026-09-18
Show HN: MCPJam - the first testing & evaluations platform for MCP servers
A
Prathmesh, CEO of MCPJam here. Users now start in ChatGPT, Claude, Cursor, and other AI clients. They reach your product through your MCP server. That means your users often aren’t in your product anymore. You can’t see what they prompted for, how the agent interpreted it, or whether your server helped them get the result they wanted. I saw this firsthand leading MCP technical strategy at Asana, including our ChatGPT and Claude launches. We were building high-stakes enterprise integrations, but we had no reliable way to test them the way we test normal software- or to know whether they worked once they reached real users. I started using MCPJam for those problems after re-connecting with my former coworker who created the project. brought it to more of our developers, and worked it into our CI/CD pipeline. I joined the team because I kept hearing the same issue from other companies building for agents. So, what does “good” look like for MCP? For us, it means users reliably get the outcome they came for, across the AI clients they use. That’s what we’ve been building toward. MCPJam now helps you test the full workflow, from the first prompt to the expected result: * Swarms: Simulate users with different goals and prompts to find where workflows break across AI clients. * User Testing: Watch how real users interact with your MCP product, where they get stuck, and how they feel about the results. * Evals: Turn those workflows into repeatable tests that check whether users get the expected outcome. * CI/CD: Run those evals across AI clients before each release to catch regressions. Over 106,000 developers and +300 enterprises use our open-source solution to see how their servers behave locally across major AI clients. MCPJam has grown from a debugging tool into a continuous testing and evaluation workflow for MCP servers. If you’re building an MCP server or agent-facing product, give MCPJam a try. What is the hardest thing for you to test? We love hearing about your MCP server builds!
2026-10-05
JinHo-von-Choi/iron-laws
A
Iron Laws - a source code inspection CLI that points out security, structure, and maintainability problems in AI-generated code.
2026-10-20
AntoGA/agents-contract
A
AGENTS.md contract for AI coding agents + zero-dependency linter + SessionStart hook. Works with Claude Code, Codex, Cursor, Copilot.
2026-09-29
unjs/oxbox
A
🐂 Tiny, portable JS library for parsing and transforming JS/TS/JSX, powered by oxc
2026-11-05
peterretief/codemap
A
One HTML page that maps a Go module: packages, dependencies, files and functions
2026-11-03
Balanov/verdict
A
A 197 KB local semantic verifier for AI agent tool calls. Exit code 0 is not proof.
2026-10-25
songjianyang/xss-audit
A
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
2026-10-15
NethermindEth/LeanCIL
A
LeanCIL is a Lean 4 formal verification framework for .NET programs. It enables machine-checked proofs of correctness and safety against compiled Common Intermediate Language (CIL), supporting applications written in C#, F#, and other .NET languages.
2026-09-29
kofiadeyemiq/shellstrict
A
Lint shell scripts for missing strict mode and for mktemp files with no trap cleanup, complementing ShellCheck.
2026-09-08
josevalim/lynx
A
Proofs for Erlang/Elixir programs through LEAN (via automatic translation of Core Erlang)
2026-10-11
GGGODLIN/gggodlin-cc-harness
A
Governance layer of a personal Claude Code harness: gates, hooks, review and spec-to-ticket workflow. Reference, not a turnkey install.
2026-09-15
pliablepixels/gap-trap
B
Turns vibe coding into high quality code. Sets up rules and gates in your repo so AI-written code stays correct without you reviewing every line.
2026-09-03
smallerxuan/mvl
B
A lightweight MVVM support library for multitasking systems + LVGL 8.x.
2026-08-25
stemmatics/paneldx
A
Validate longitudinal datasets before you model them: entity-key integrity, target leakage, cumulative-feature traps, and the naive baseline you forgot to run.
2026-08-23
tiammomo/RepoSteward
A
Local-first, policy-gated control plane for turning GitHub issues into verified, human-reviewed pull requests with coding agents.
2026-10-06
danielmiessler/Deeds
A
A CLI and Claude Code plugin that reads every commit's diff and counts what actually got better: new capabilities, fixes, and upkeep. A way to measure work done with AI that doesn't depend on counting PRs.
2026-09-19
indada/repopilot
B
Verification-driven AI software iteration, powered by the OpenAI Codex SDK. Self-hosted agents turn goals, GitHub Issues and PR feedback into tested, reviewable changes, with bounded execution and human control over merging and deployment.
2026-09-13
Qiuner/birdview
B
Stop letting AI code blind. Map the architecture before every change with Birdview.
2026-11-09
faissalrez/svelte-check-reporter
A
Show svelte-check's Svelte and TypeScript errors in GitHub pull requests and GitLab merge requests: Code Quality reports, Actions annotations and SARIF for code scanning.
2026-09-09
Show HN: Genotype: language that compiles to idiomatic TS, Rust and Python
B
Hey HN! I just shipped the first public version of a new programming language that I have worked on for the past two years. Its goal is to help synchronize types between TS, Rust, and Python (more to come). Two main use cases are the API client libraries and client-server interop, i.e., a TS web app talking to a Rust server. I focused on making it as flexible as possible but always produced idiomatic types that look and feel like they were carefully crafted by humans. It was a challenge, e.g., I had to test 7 Python versions for every language feature or had to implement Rust literals runtime. It's written in Rust, btw ;-)
2026-10-24
haplollc/Vesalius
A
A map of your codebase for Claude Code: an on-device code graph with an MCP server, a CLI, a Mac app and a VS Code extension.
2026-10-24
theorem-labs/oss-verify
A
OSS Verify: enrollment and build instructions for formally verifying open-source fuzz targets
2026-10-23
yesterdayfuture/confess
A
Your AI wrote the code. You still have to explain it before it ships.
2026-08-25
mcarlssen/claude-adversarial-review
A
A Claude Code plugin that runs an adversarial, multi-agent review of your uncommitted diff before you commit it.
2026-10-10
tommy0103/better-readme-skill
B
Audit and rewrite your README so readers can bail fast — an Art of README agent skill
2026-10-08
colinhacks/motherload
B
Import TOML, YAML, JSON5, JSONC, CSV, TSV, Markdown, text and .env files as typed modules, and JSON Schema as a type and a validator. TypeScript 7.1 content mappers.
2026-09-29
kofiadeyemiq/iterleak
B
Go analyzer that reports iter.Pull and iter.Pull2 calls whose stop function can go uncalled and leak a goroutine.
2026-09-27
rhiever/evident-charts
B
Teaches AI coding agents to make clear, honest charts, and checks each one before you see it. For Claude Code, Codex, Cursor, and more.
2026-09-23
mizchi/jev-test-filter
B
Score every test against a git diff with Jev, and emit the filter arguments vitest, node:test, Playwright, cargo test and go test already understand
2026-09-18
devanshbatham/commit-miner
B
Classify Git commit diffs and messages with Jev. Bug fixes, security fixes/CWEs, and change types.
2026-09-14
Dillonsmart/docket
B
Per-commit evidence records for agent-written code. Captures what the agent tried, what verified it, and what nobody reviewed
2026-10-25
trailofbits/brotli-checker
B
Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.
2026-10-16
Palladiymateria/sharecheck
B
Local CLI that checks your project for accidental secrets, sensitive files, and oversized assets before publishing to GitHub. No uploads. No runtime dependencies.
2026-10-15
luawl/semantic-lifter
B
A checked lifting backend for Luau: it turns a frontend's lifter_ir_v1 program into readable Luau that the official compiler accepts, or refuses it with a typed diagnostic, under a typed evidence contract; with a source frontend and a compiler-disassembly frontend.
2026-10-14
Show HN: Parsimony – an open-source benchmark for how much code AI models add
B
Existing benchmarks measure solve rate and token output/cost, but don't punish excess code, which makes a codebase harder to work with in the long term. I wanted to measure this since it matters most for long-term projects. Method: it takes the patches that benchmarks already publish (DeepSWE, SWE-bench Verified, SWE-bench Live) and counts "coding units": syntax elements like statements, calls, names and literals. I didn't use lines of code, so cramming code isn't rewarded. Deleted code is subtracted, so it measures net units. GPT-6 and Claude 5.5 have no public patches yet, so I ran them myself on 3–10 tasks on my own subscriptions (shown as faded circles, not ranked). Any feedback or model contributions are welcome, especially public patch exports for newer models. GitHub: https://github.com/La5u/Parsimony Not affiliated with any of the benchmarks.
2026-09-05
chigwell/Penelopa.ai
B
Continuous improvement for AI coding agents: Penelopa analyzes real Codex and Claude Code sessions, finds repeated workflow patterns, and turns them into reusable skills, checks, prompts, and recommendations.
2026-10-29
haydenschmitty/floorplan
B
See how your app actually fits together. An interactive, plain-English map of your codebase, drawn by Claude or Codex.
2026-10-22
TianqiLiu1/PACE-Bench
B
Official code and project page for PACE-Bench: When Coding Agents Outpace Review: Evaluating PRD-Driven Development in Mature Enterprise Repositories.
2026-10-17
remnient/liveness
B
Verified dead store elimination in Lean 4 with a proved terminating liveness fixed point
2026-10-02
Show HN: Yantra – an LALR(1) parser generator for C++
B
Yantra is a C++ parser generator: lexer, parser, and AST walker all generated from one tool. It builds the whole AST first, then walks it. Most LALR parser generators (Yacc, Bison, Lemon) run your semantic actions during parsing, as each rule reduces, bottom-up. That means at the time a rule's action runs, you don't yet know what its parent looks like. This pushes a lot of grammars toward hand-built AST classes and a separate walking pass whenever you need to look ahead into siblings or defer a decision until more context is available. On the other hand, Yantra always builds the whole AST first, then walks it top-down in a separate pass, calling your semantic actions as it goes. A parent rule's action can run before its children are visited. A single grammar can define more than one walker. For example, one that emits C++, another that emits Java, from the same parse. The AST and the walker classes are both generated for you. A small example (full version, with compile commands, in the README): start := expr; expr := expr(a) PLUS expr(b) %{ std::cout << "Adding" << std::endl; %} expr := NUMBER(N) %{ std::cout << "Number: " << N.text << std::endl; %} NUMBER := "\d+"; PLUS := "\+"; WS := "\s+"!; Running this on "1 + 2 + 3" prints: Adding Number: 1 Adding Number: 2 Number: 3 The outer "Adding", the root of the tree, prints first, before either of its children. That's only possible because the whole tree exists before any action runs. Some other things about it: integrated lexer with mode support (for things like nested comments), an optional amalgamated single-file output mode with a generated main(), C++23, MIT licensed. It's young (0.5.1, pre-1.0) and single-maintainer, so treat it as early. I'd rather know what breaks than have it look more finished than it is. Known gaps are listed at https://github.com/TantrixAuto/yantra/blob/main/docs/known_l... Repo: https://github.com/TantrixAuto/yantra Feedback and questions are all welcome. I'll be around.
2026-09-29
scarletkc/seiso
B
A Markdown convention and linter for project docs written by AI and read by humans and agents
2026-08-29
jameskomo/config-drift-checker
B
Config Drift Checker for coding-agent setups: CI for your Claude Code configuration (CLAUDE.md, skills, hooks) — eval cases, release-watch, regression alerts
2026-09-20
uehaj/jev-semgrep
B
grep by meaning, across languages. TypeSafe Jev scores every line against a meaning; combine meanings with AND/OR/NOT. A meaning-based grep. Search English in Japanese and Japanese in English
2026-09-16
ChufanS008/ship-the-result
B
Claude Code skill + hook that keeps chat corrections out of commit messages, PR bodies, comments, test names and filenames
2026-09-09
skydoves/nowinandroid-kmp
B
📱 Now in Android KMP is a full Kotlin Multiplatform port of Google's Now in Android sample.
2026-09-03
Socialpranker/zodchiy
B
An architectural audit where a finding is admissible only once its cost is measured from git history. A doctrine for coding agents plus a stdlib-only measurement CLI.
2026-08-30
OMD-123/agent-loop-guard
B
Protect AI agents from runaway loops, repeated tool calls, and uncontrolled execution. Provider-independent, zero-dependency, TypeScript-first.
2026-08-27
Morningstar202604/AgentSeed
B
Anti-hallucination guardrails for AI coding agents - hybrid Skill + MCP server (6 tools) that verifies code before it is marked done. Works with Claude Code, Cursor, VS Code, Copilot.
2026-08-26
CMGS/asl
B
Structural layout checker for Go — vet-style multichecker enforcing declaration-order rules linters cannot express
2026-10-04
tools4imps/exhale-ruby
B
The contraction gate for Rails: no PR merges while the codebase holds duplication the Contract doesn't keep
2026-10-14
Show HN: Deslop – Oxlint rules for AI-generated TypeScript
C
Catches unsafe types, duplicate code, and low-value tests.
2026-09-16
riesaexe/r-doc
B
AI agent skill for maintaining project AGENTS.md and docs/ documentation systems.
2026-09-12
Heyosseus/sloppy
B
Laravel-aware static analysis for the code-quality patterns AI coding agents leave behind. Deterministic, local, no LLM.
2026-08-29
haraldalder-vibemogger/vibe-audit
B
Проверь свой навайбкоженный проект на дыры до того, как это сделают боты 🩺
2026-10-15
ymatrix1/vantage
B
A calm, visual view of the true state of your AI-assisted work. Tracks work items from Asked to Verified on evidence, not agent claims, across Claude Code, Codex, git and PRs. Local-first.
2026-09-25
Ice-Hazymoon/jevlint
B
Semantic lint rules for the code-review questions a deterministic linter can't express
2026-09-12
StatXzy7/worktree-import-guard
B
Verify that your tests actually executed the source tree you think they did.
2026-08-29
Emanuelel/dont-reinvent
B
Stop your AI coding agent from reinventing the wheel. A Claude Skill that checks Free vs. Build vs. Buy before writing code, and actually vets what it finds (license, maintenance, security) instead of stopping at star count
2026-11-09
avivgerz-hue/vibe-shield
B
60-rule static security scanner, MCP server & skill poisoning auditor for AI-generated codebases (Claude Code, Codex, Cursor).
2026-10-24
theorem-labs/oss-verify-proofs
C
Theorem statements about OSS-Fuzz fuzz targets as compiled RISC-V binaries, and machine-checked Rocq proofs of them
2026-09-19
Peeter95/code-map
B
Fly over a codebase as a zoomable GPU treemap (2D and 3D city), built with Makepad
2026-09-18
repoboost-hq/github-launch-checklist
C
Audit a GitHub repository before launch - ten readiness checks scored 0-10: name, description, topics, README, license, demo, installation, contributing guide and issue templates. Free and open source.
2026-10-25
morganlinton/BeautifulRust
B
A Claude Code plugin that teaches Claude to write idiomatic, robust Rust
2026-10-12
DarkHater01/slopbench
B
Measures how much code LLM agents waste. 5 tasks, sandboxed, weekly snapshots, contestable references.
2026-09-12
GlitchLoom/SwiftDependencyGraphExplorer
B
A native macOS app for exploring type-level dependencies in Swift projects. Pick a folder, select a root type, and visualize its dependency graph with Mermaid — fully local, no source code ever leaves your Mac. Export as Mermaid source or SVG.
2026-08-30
Timefiles404/lean-mode-skill
C
Restraint engineering skill: when to write defensive code and when not to, and how to cut a round of build-and-test time from tens of minutes to tens of seconds. SKILL.md, usable standalone.
2026-08-27
saurabhkumar8112/cyclomatic-complexity-skill
C
Claude skill: refactor code to reduce cyclomatic complexity
2026-09-27
agentscope-ai-java/redis-lua-lint
C
Static analysis for Redis Lua scripts — cluster-unsafe key access, unbounded loops, sandbox violations.
2026-09-20
mdpsec/should-i-submit
B
A local, safety-first pre-submission reviewer for bug bounty reports.
2026-09-15
00200200/repro-lens
B
Static reproducibility checks, experiment replay and before/after evidence for ML code and coding agents — no ML dependencies for scans.
2026-08-29
grapefruit0205/click
B
Compile natural-language software intent into an implementation-ready design contract before coding.
2026-08-25
dughogan/comfy_workflow_audit
B
A tool to evaluate whether a ComfyUI workflow can be used in production.
2026-10-08
JinHo-von-Choi/anti-samcheonpo
B
A harness that detects, warns about, and blocks AI coding agents wasting time and money (over-verification, context drift, infinite loops, false completion) / A harness that catches AI coding agents wasting time and money
2026-10-05
MatteoGabriele/interlinked-action
B
GitHub Action that flags agent-written PR descriptions
2026-09-27
agentscope-ai-java/css-layer-lint
C
Lint CSS cascade layers across a whole project — contradictory order between files, silent name merges, unlayered rules winning.
2026-09-16
typesafeainate/dspy-typesafeify
B
Add a decorator for dspy Signatures that automatically uses TypeSafe where relevant
2026-08-29
xcjy8bao/pi-plugin-signal-grep
B
Context-efficient, correctness-first ripgrep search and bounded code inspection for Pi, with adaptive context budgets, stable cursor snapshots, safe grep interoperability, and localized controls.
2026-10-21
Monopoly0024/simple-checker-v1
C
Codex skill: break down code feature modules and verify implementation with colorful flowcharts and runtime evidence — helps you write and update AI code.
2026-10-11
singularityhacker/Estack
B
Elixir/Phoenix skills for AI coding agents. Practical workflows for architecture, testing, security, and deployment.
2026-09-28
GreyforgeLabs/slopbrake
B
Brakes for the software factory: deterministic checks, a fresh-context reviewer that commits its fixes, and one-way-door triage for coding agents. Built on Matt Pocock's skills. Every rule proven to bite.
2026-09-27
agentscope-ai-java/sqlite-attach-lint
C
Flag ATTACH DATABASE footguns — cross-database atomicity, alias shadowing, ambiguous unqualified tables.
2026-09-10
Aaronontheweb/architecture-assessment
B
Evidence-first architecture assessment and simplification skills, with Roslyn syntax analysis and a SQLite source catalog
2026-10-10
LACAN-1/deepseek-supervisor
B
"You should know" for Claude Code on third-party models such as DeepSeek: a side pass reviews the work every few steps and tells the model what it notices
2026-09-25
doeixd/incremental
B
A typed fold over object contributions: build an object piece by piece, know its exact shape at every step, and prove when it is complete.
2026-10-19
ajogalekar/claude-codex-loop
B
Autonomous Claude Code execution with hourly Codex review, reconciliation, and bounded follow-up prompts.
2026-10-07
ghostdogpr/skills
B
Agent skills, starting with refine: shrink code through constraints, simplicity and parametricity reviews
2026-09-26
agentscope-ai-java/importmap-lint
C
Validate import maps against the HTML spec resolution algorithm, and flag unversioned CDN entries.
2026-09-14
LalitSinghRana/pr-constellation
B
See how one change in a PR flows into the rest. Skip the noise.
2026-10-26
hyoban/peek
C
A native git diff viewer for macOS, with Codex-written commits and code reviews, built in Go with MyGo
2026-10-14
priyanshujha/subagent-studio
C
Claude Code plugins for running lean, single-purpose subagents: plan, build, two review passes
2026-09-20
Nanako0129/lorenzini
C
Claude Code skills that wait for a third-party PR reviewer and decide whether its verdict actually means pass
2026-10-25
mokevnin/dev-guardrails
C
An opinionated, curated list of tools for enforcing software development standards: one recommended tool per job, with limits.
2026-09-15
MrPunyapal/laravel-extended-validation
C
Validation rules for Laravel applications, available as rule classes, fluent Rule macros, and string rules.
2026-09-01
sharptoolbox/codebase-reverse
C
Full source code reverse engineering skill: reverse existing source code into a complete metamodel of features/implementation/architecture/interfaces/objects/components/database, deeply customized for Java Web and Java microservices (Spring Boot/Cloud). Supports WorkBuddy / Claude Code / Codex.
2026-08-28
shamashel/testing-on-the-toilet
C
Agent skill: Google Testing on the Toilet practices for writing and reviewing tests
2026-10-14
ivandilelio/kybes
C
Know Your Backend is a Plugin that help your AI to generate a structured Model/View/Controller application, witouth surprise, code duplication and different modality in a different project
2026-10-06
robonuggets/skill-creator-plus
C
Free Claude skill that audits, builds and improves other skills against Anthropic's skill-writing rules, including what changed for Opus 5.5, Sonnet 5.5 and Fable 5.
2026-09-06
jerryyeungisjingyang/claude-like-codex-code-review
C
Claude-inspired code review for Codex five independent review tracks evidence-based verification and tiered Luna / Terra / Sol agents. Read-only by default.
2026-09-27
PinoyFreeCoder/deployment-checklist
C
Language-agnostic pre-deployment checklist for web & mobile apps — security-heavy, with human and AI-agent versions.
2026-10-30
pedrojaques99/visant-skills-public
C
Skills de Claude Code da Visant: auditoria de UI anti-slop, motion, frontend, copy. Com detectores executáveis.
2026-10-17
tetriz-ai/tetriz-harness
C
Recommend AI coding harness changes from repository context and coding signals, then distribute approved rules, skills, hooks and agents to selected people or teams. Pair with Agent Desk through your ingestion adapter; use audience targeting for manual test/control rollouts.
2026-09-02
toyo12312/nestjs-clean-architecture-boilerplate
C
Production-ready NestJS authentication boilerplate built with strict Clean Architecture, Domain-Driven Design (DDD), and full unit test coverage.
2026-10-26
Aaryan-Kapoor/english-rs
C
English, rewritten in Rust: grammar as trait bounds, pronouns as borrows, and englishc, a compiler with rustc-style diagnostics for prose
2026-10-08
pullboard-dev/pullboard
C
Autonomous development for real products. Agents build from the spec you approve, and nothing ships until another agent proves it.
2026-10-03
1942853632/schema-diff-lens
C
Local browser extension for explainable JSON schema compatibility checks
2026-08-25
CanerKocak/clanker-skills
C
Evidence-first agent skills for Codex, Claude Code, OpenCode, Pi, and Grok: planning, code review, call-chain analysis, security audits, data quality, PDF reporting, and UI.
2026-10-03
1942853632/openapi-lens
C
Local Chrome extension for explainable OpenAPI contract quality analysis
2026-10-03
1942853632/pr-risk-lens
C
Local Chrome extension for explainable pull request change-risk analysis
2026-09-18
DevMortimer/pi-warden
C
Guardrails for Pi built on pi-typesafe that steer the agent instead of interrupting you: Jev judges irreversible and off-task tool calls, detects stuck loops, checks unverified done claims, flags slop
2026-09-16
GRD-Chang/grill-engineering
C
From Matt Pocock Skills to working code. Automate GitHub ticket development, verification, and repair with Codex.
2026-09-28
yldray/vibe-check
C
Ship AI-written code without shipping AI-written bugs. Pre-launch test cases, chronic bugs and store-release rules for vibe coders.
2026-09-27
Yasirdora/codedirector
C
The intent layer for coding agents — Human → Intent → Agent → Software. Draft the scope, lock it, verify the change.
2026-09-26
angusdevgo/Seep-Tool
C
CWE-602 client-side authentication weakness white-box audit methodology and defense-in-depth hardening research framework
2026-09-03
4n5rud/focus-one-feature-backend
C
Feature-level approval gate workflow harness (backend only, core/adapter structure)
2026-08-27
YeamimHossainSajid/CodeMonk
C
CodeMonk 🥋 —>An open-source AI powered code intelligence platform that helps developers understand, explore, and navigate complex codebases using modern Spring Boot, Spring AI, RAG, knowledge graphs, and intelligent code analysis
2026-09-24
TypeSafeAI/jev-harness
C
A custom coding harness for TypeSafe AI's Jev: an LLM proposes, Jev answers narrow questions, code decides, every step leaves a receipt.
2026-09-10
kuya-egg/Monozukuri
C
An AI coding skill that applies Japanese-inspired craftsmanship to build simple, correct, verifiable, and maintainable software.
2026-09-18
darksecc/mccccodereviewer
C
MCC Code Reviewer — evidence-first repository intelligence with score-v2, regression radar, blast radius, codebase GPS, task lens, contract/test/architecture change analysis and safe What-If review simulation.
2026-09-15
00200200/maintainer-skills-lab
C
16 reusable skills and 6 agents for Codex, Claude Code, Cursor, OpenCode and Grok Bot: Humanizer, ML debugging, PR review and Skill Watch.
2026-09-12
bluenzzz/typescript-engineering
C
Reusable TypeScript engineering skill for AI coding assistants. Practical guidance on type safety, runtime validation, architecture, security, and testing. Works with Codex, Claude Code, Copilot, Cursor, and more.
2026-09-23
unicodef1wn/lauren-poteto-rules
D
Engineering rules for building trustworthy coding-agent workflows, inspired by Lauren Tan.
2026-09-15
misbahsy/anti-ai-slop
D
An agent skill with multiple gates to check and to remove any AI slop. Use it with codex/claude code or any of your favorite AI tools.
2026-09-19
Eriskii/ErisLint
D
Rust linter powered by configurable Jev rules, with a VS Code extension.
2026-09-18
devagrawal09/jev-review
D
A staged code-review workflow and local dashboard built with TypeSafe Jev.
2026-10-16
ShadowSwaps/REA-Reconstruction-Companion
D
Open-source, model-independent Agent Skill for evidence-based software reconstruction with REA. Optional integration, portable installer, and validation workflows.
2026-09-05
alphaparkinc/genpark-edge-case-unit-test-coverage-synthesizer-skill
D
Edge-case unit test suite synthesizer & branch coverage optimizer (CodiumAI)
2026-08-26
MuhammadAbdullah80/dsa-java
D
Data structures implemented from scratch in Java: O(1) LRU cache and union-find with path compression
2026-10-29
MoeForge/moego
D
A collection of optimized Go packages for performance-critical code paths.
2026-10-05
Alpha-Park/genpark-agentic-git-diff-pr-review-and-patch-synthesizer-skill
D
Parses unified git diffs, detects security and performance anomalies, generates inline code reviews, and synthesizes unified patches
2026-09-18
NiazMorshed2007/jev-review
D
Local-first MCP plugin for continuous software-quality review by AI coding agents, powered by Jev.
2026-09-15
misinierijon4-debug/astra-sol-luna-pipeline
D
Staged architecture, decomposition, implementation, and multi-tier review pipeline for Codex
2026-09-05
alphaparkinc/genpark-realtime-ast-code-completion-snippet-ranker-skill
D
Real-time sub-10ms AST code completion snippet ranker (Augment Code)
2026-10-02
wenslink-os/break-your-assumptions
D
Interactive experiments in the assumptions that break software. Predict, break, repair, and keep the test.
2026-09-20
tyler-dot-earth/patdown
D
typesafe's jev as a "fuzzy linter". give your code an ocular patdown.
2026-09-20
webkubor/tombstone-reaper-skill
D
🪦 Let dead code and tombstone skills truly rest in peace, show off your subtraction achievements, and end context pollution in the AI era.