Snyk MCPhttps://snyk.ioSecurity scanning MCP. Snykhttps://snyk.ioSAST/SCA/secret scanning platform + MCP + CLI. Strixhttps://strix.aiAutonomous AI penetration testing. SonarQubehttps://www.sonarsource.com/products/sonarqubeCode quality + security analysis platform. Trivyhttps://trivy.devContainer + IaC + dependency scanner. OWASP ZAPhttps://www.zaproxy.orgThe Zed Attack Proxy — DAST. Nucleihttps://github.com/projectdiscovery/nucleiTemplate-based vuln scanner. CodeQLhttps://codeql.github.comGitHub's semantic code analysis. Checkovhttps://www.checkov.ioIaC security scanning. Bandithttps://github.com/PyCQA/banditPython security linter. TruffleHoghttps://github.com/trufflesecurity/trufflehogFind leaked credentials. Grypehttps://github.com/anchore/grypeVuln scanner for images + filesystems. OSV-Scannerhttps://github.com/google/osv-scannerGoogle's vuln database scanner. Bearerhttps://github.com/Bearer/bearerPrivacy + security SAST. MobSFhttps://mobsf.github.io/Mobile-Security-Framework-MobSFMobile app security framework. Horusechttps://github.com/ZupIT/horusecSAST + secrets + deps orchestrator. npm audithttps://docs.npmjs.com/cli/v10/commands/npm-auditBuilt-in npm dependency audit. cargo audithttps://github.com/rustsec/rustsecRustSec advisory scanner. dependency-doctor skillhttps://github.com/Shubhamsaboo/awesome-llm-apps/tree/main/agent_skills/dependency-doctorSkill: diagnose and fix dependency issues. Snykhttps://snyk.ioSAST/SCA/secret scanning + MCP + CLI. Penetration testing with Strixhttps://github.com/t3ratech/t3rnelAutonomous AI pentest skill — exploits and proves vulns (OWASP+). Find security vulnerabilities (Strix)https://github.com/t3ratech/t3rnelWhite-box security review + live exploit proofs. Fix security vulnerabilities (Strix)https://github.com/t3ratech/t3rnelRoot-cause remediation flow for pentest findings. Semgrephttps://semgrep.devStatic analysis rule engine. Gitleakshttps://github.com/gitleaks/gitleaksSecret scanning for repos.