code-pathfinder
★ 135
vs
agent-security-scanner-mcp
★ 107
code-pathfinder vs agent-security-scanner-mcp
code-pathfinder: Code Pathfinder is an open-source, AI-native static code analysis tool that builds a queryable graph of your codebase for security teams. It uses AST, CFG, and DFG to trace data flows across multiple languages and provides context-aware vulnerability detection and triage.; agent-security-scanner-mcp: This is a comprehensive security scanner designed for AI coding agents and autonomous assistants. It performs static analysis to detect code vulnerabilities, identifies hallucinated packages, and protects against prompt injection attacks.
01
TL;DR
Choose code-pathfinder if…Detect CVEs and conduct vulnerability research by understanding dependency usage and attack surfaces.
Choose agent-security-scanner-mcp if…Real-time Code Security: Scan and automatically fix vulnerabilities in code files immediately after writing or editing.
02
Side-by-Side Comparison
Field
code-pathfinderagent-security-scanner-mcpCategory
Observability
Security & Safety
Stars
★ 135
★ 107
License
AGPL-3.0
MIT
Updated
1d ago
5d ago
Open Source
Yes
Yes
Tags
AI-Native Security, Static Code Analysis (SAST), Vulnerability Scanner
AI Security, Code Analysis, Vulnerability Scanner
03
Features
code-pathfinder01Structural code analysis using AST, CFG, and DFG to find exploit paths.
02AI-powered vulnerability triage and context-aware validation with LLMs.
03Unified data flow tracing across multiple languages (Python, Docker, Docker Compose).
04Flexible deployment as IDE extension, CLI tool, or integrated into CI/CD pipelines.
agent-security-scanner-mcp01Advanced Code Vulnerability Scanning: Utilizes AST and taint analysis with 1700+ rules across 12 languages to detect a wide range of security flaws.
02Automated Vulnerability Fixing: Provides 120 auto-fix templates to remediate identified security vulnerabilities efficiently.
03AI Package Hallucination Detection: Identifies AI-generated fake package names across 7 ecosystems to prevent malicious dependency installation.
04Prompt Injection Protection: Scans AI agent prompts for malicious instructions and injection attempts using 56 specialized rules.
05Seamless AI Client & CI/CD Integration: Offers deep integration with popular AI coding agents and supports CI/CD workflows with SARIF output.
04
Use Cases
code-pathfinder↳Detect CVEs and conduct vulnerability research by understanding dependency usage and attack surfaces.
↳Provide deep code intelligence (call graphs, data flows) to AI coding assistants like Claude.
↳Perform in-editor security checks to catch vulnerable patterns during code writing.
↳Integrate into CI/CD pipelines for automated security scanning with SARIF output.
agent-security-scanner-mcp↳Real-time Code Security: Scan and automatically fix vulnerabilities in code files immediately after writing or editing.
↳Dependency Verification: Check new package names against known registries to prevent installation of AI-hallucinated or malicious dependencies.
↳Secure AI Agent Interactions: Guard against prompt injection and malicious instructions when AI agents process external or untrusted input.
↳CI/CD & PR Security: Incorporate into CI/CD pipelines and pull request reviews for automated scanning of code changes and project audits.
05
Best For
code-pathfinderTrendingCode AssistantSecurity & Safety
agent-security-scanner-mcpTrendingSecurity & SafetyPrompt Engineering
FAQ
FAQ
What is the difference between code-pathfinder and agent-security-scanner-mcp?
Both code-pathfinder and agent-security-scanner-mcp are in the Observability category. code-pathfinder has 135 stars, while agent-security-scanner-mcp has 107 stars.
Which is better, code-pathfinder or agent-security-scanner-mcp?
The best choice depends on your use case. Choose code-pathfinder if Detect CVEs and conduct vulnerability research by understanding dependency usage and attack surfaces., and agent-security-scanner-mcp if Real-time Code Security: Scan and automatically fix vulnerabilities in code files immediately after writing or editing..
Is code-pathfinder free or open source?
Yes, code-pathfinder is open source on GitHub (AGPL-3.0).
Is agent-security-scanner-mcp free or open source?
Yes, agent-security-scanner-mcp is open source on GitHub (MIT).
→