{"id":"6cf65420-1fe1-4a1c-9372-30a0f32c23e9","shortId":"QuhyZ2","kind":"mcp","title":"Skylos","tagline":"Privacy-first SAST tool for Python, TypeScript, and Go that detects dead code, security vulnerabilities, and code qua...","description":"Privacy-first SAST tool for Python, TypeScript, and Go that detects dead code, security vulnerabilities, and code quality issues with hybrid AST and optional LLM analysis.\n\nSkylos is a static analysis security testing (SAST) tool that bridges traditional static analysis with AI agents. It detects dead code, security vulnerabilities (SQL injection, SSRF, secrets), and code quality issues in Python, TypeScript, and Go codebases. The hybrid engine combines AST parsing with optional local or cloud LLM verification to eliminate false positives caused by dynamic language patterns and framework magic. Includes CI/CD integration with GitHub Actions, a VS Code extension, and agentic AI-powered auto-fix capabilities.","tags":["skylos"],"capabilities":["mcp","transport-stdio","open-source"],"categories":[],"synonyms":[],"warnings":[],"endpointUrl":"https://github.com/duriantaco/skylos","protocol":"mcp","transport":"stdio","auth":{"type":"mcp","details":{"transport":"stdio"}},"qualityScore":"0.750","qualityRationale":"deterministic score 0.75 from registry signals: · indexed on pulsemcp · has source repo · 414 github stars · registry-generated description present","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:mcp:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T00:23:47.006Z","embedding":null,"createdAt":"2026-04-21T19:27:47.945Z","updatedAt":"2026-04-22T00:23:47.006Z","lastSeenAt":"2026-04-22T00:23:47.006Z","tsv":"'action':115 'agent':64,121 'ai':63,123 'ai-pow':122 'analysi':47,52,61 'ast':43,89 'auto':126 'auto-fix':125 'bridg':58 'capabl':128 'caus':102 'ci/cd':111 'cloud':95 'code':15,19,34,38,68,76,118 'codebas':84 'combin':88 'dead':14,33,67 'detect':13,32,66 'dynam':104 'elimin':99 'engin':87 'extens':119 'fals':100 'first':4,23 'fix':127 'framework':108 'github':114 'go':11,30,83 'hybrid':42,86 'includ':110 'inject':72 'integr':112 'issu':40,78 'languag':105 'llm':46,96 'local':93 'magic':109 'mcp' 'open-source' 'option':45,92 'pars':90 'pattern':106 'posit':101 'power':124 'privaci':3,22 'privacy-first':2,21 'python':8,27,80 'qua':20 'qualiti':39,77 'sast':5,24,55 'secret':74 'secur':16,35,53,69 'skylo':1,48 'sql':71 'ssrf':73 'static':51,60 'test':54 'tool':6,25,56 'tradit':59 'transport-stdio' 'typescript':9,28,81 'verif':97 'vs':117 'vulner':17,36,70","prices":[{"id":"630de1d7-c966-452d-a9a6-d8227830300d","listingId":"6cf65420-1fe1-4a1c-9372-30a0f32c23e9","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"mcp-free","isPrimary":true,"details":{"transport":"stdio"},"createdAt":"2026-04-21T19:27:47.945Z"}],"sources":[{"listingId":"6cf65420-1fe1-4a1c-9372-30a0f32c23e9","source":"pulsemcp","sourceId":"https://www.pulsemcp.com/servers/duriantaco-skylos","sourceUrl":"https://api.pulsemcp.com/v0beta/servers","isPrimary":true,"firstSeenAt":"2026-04-21T19:27:47.945Z","lastSeenAt":"2026-04-22T00:23:47.006Z"}],"details":{"listingId":"6cf65420-1fe1-4a1c-9372-30a0f32c23e9","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"source":"pulsemcp","transport":"stdio","server_name":"Skylos","external_url":"https://github.com/duriantaco/skylos","github_stars":414,"registry_url":"https://www.pulsemcp.com/servers/duriantaco-skylos","source_code_url":"https://github.com/duriantaco/skylos"},"updatedAt":"2026-04-22T00:23:47.006Z"}}