Agensi Skill ZIP Preflight (Free, Offline)
by Colton Mcclain
Free offline pre-submit checker for Agensi creators: validates a skill ZIP against observed delivery rules and shows what the buyer's agent will receive.
by Colton Mcclain
Free offline pre-submit checker for Agensi creators: validates a skill ZIP against observed delivery rules and shows what the buyer's agent will receive.
by Colton Mcclain
Free offline check that finds Supabase service_role / sb_secret_ keys leaking into browser code, public env vars, bundles or committed files.
by Colton Mcclain
Statically finds what makes Python and JS/TS tests flaky: .only, sleeps, real clock, unseeded random, network calls, fixed ports, retries.
by Colton Mcclain
Checks README and docs Markdown for broken relative links, dead #anchors, unclosed code fences and undefined reference links, without touching the network.
by Colton Mcclain
Scores a git diff 0-100 for review risk and tells you which files to read first: migrations, CI, auth paths, deleted tests, risky added lines.
by Colton Mcclain
Scans a repo's working tree and full git history for leaked API keys, private keys, DB passwords and committed .env files, with redacted output.
by Colton Mcclain
Audits MCP server and agent settings JSON for hardcoded secrets, unpinned npx packages, shell wrappers, plaintext remotes and bypassPermissions.
by Colton Mcclain
Validates a cron expression, lists the real next run times and flags classic traps like day-of-month OR day-of-week.
by Colton Mcclain
Check your Supabase migrations for the leaks that expose data to the anon key: tables without RLS, always-true write policies, user_metadata checks, RLS-bypassing views. PASS/BLOCK with file:line and fix SQL. Never touches your database.
by Colton Mcclain
Paste a PostgreSQL EXPLAIN JSON plan and get ranked bottlenecks (missing index, disk spills, bad row estimates) with evidence, plus a before/after comparison. Never touches your database.
by Colton Mcclain
Audit a Python repository's structure, imports, functions and maintainability signals with deeper static analysis.
by Colton Mcclain
Analyze local JSON operational evidence or explicitly collect read-only systemd state/logs for one service; report findings without restarting services.
by Colton Mcclain
Find exposed secrets and unsafe environment configuration before they reach source control or an AI agent.
by Colton Mcclain
Audit what an MCP server or agent skill can actually access before you install it.
by Colton Mcclain
Verify dependency upgrades against your actual repository before adopting them.
by Colton Mcclain
Diagnose broken Git states and produce the safest recovery path.
by Colton Mcclain
Review a patch for concrete regression risk before it lands.
by Colton Mcclain
Static repository hygiene audit to detect missing config files, exposed secrets, and structural issues.
by Colton Mcclain
Autonomous repository maintenance that finds actionable engineering work, produces verified fixes, and returns qualified patches with verification reports.