<?xml version="1.0" encoding="UTF-8"?>
<resources count="10">
  <resource slug="snyk" kind="security-tool|api-service" stars="5663"><name>Snyk</name><url>https://snyk.io</url><description>SAST/SCA/secret scanning platform + MCP + CLI.</description></resource>
  <resource slug="sonarqube" kind="security-tool"><name>SonarQube</name><url>https://www.sonarsource.com/products/sonarqube</url><description>Code quality + security analysis platform.</description></resource>
  <resource slug="codeql" kind="security-tool"><name>CodeQL</name><url>https://codeql.github.com</url><description>GitHub's semantic code analysis.</description></resource>
  <resource slug="bandit" kind="security-tool"><name>Bandit</name><url>https://github.com/PyCQA/bandit</url><description>Python security linter.</description></resource>
  <resource slug="bearer" kind="security-tool"><name>Bearer</name><url>https://github.com/Bearer/bearer</url><description>Privacy + security SAST.</description></resource>
  <resource slug="mobsf" kind="security-tool"><name>MobSF</name><url>https://mobsf.github.io/Mobile-Security-Framework-MobSF</url><description>Mobile app security framework.</description></resource>
  <resource slug="horusec" kind="security-tool"><name>Horusec</name><url>https://github.com/ZupIT/horusec</url><description>SAST + secrets + deps orchestrator.</description></resource>
  <resource slug="snyk-code" kind="security-tool|skill-source" stars="5663"><name>Snyk</name><url>https://snyk.io</url><description>SAST/SCA/secret scanning + MCP + CLI.</description></resource>
  <resource slug="strix-find-vulns-skill" kind="skill-source"><name>Find security vulnerabilities (Strix)</name><url>https://github.com/t3ratech/t3rnel</url><description>White-box security review + live exploit proofs.</description></resource>
  <resource slug="semgrep" kind="security-tool|skill-source"><name>Semgrep</name><url>https://semgrep.dev</url><description>Static analysis rule engine.</description></resource>
</resources>