Skylos

Privacy-first SAST tool for Python, TypeScript, and Go that detects dead code, security vulnerabilities, and code quality issues with hybrid AST and optional LLM analysis.

Skylos is a static analysis security testing (SAST) tool that bridges traditional static analysis with AI agents. It detects dead code, security vulnerabilities (SQL injection, SSRF, secrets), and code quality issues in Python, TypeScript, and Go codebases. The hybrid engine combines AST parsing with optional local or cloud LLM verification to eliminate false positives caused by dynamic language patterns and framework magic. Includes CI/CD integration with GitHub Actions, a VS Code extension, and agentic AI-powered auto-fix capabilities.