AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Home/
RAG / Knowledge Base/
skylos
skylos logo

skylos

Active·★ 848·NOASSERTION·Updated 2026-10-22

Skylos is a privacy-first, hybrid static analysis tool designed for Python, TypeScript, and Go. It excels at detecting dead code, critical security vulnerabilities like SQL injection and hardcoded secrets, and various code quality issues, bridging traditional static analysis with advanced AI agent capabilities.

skylos sits in the RAG / Knowledge Base category, so it is usually better judged by workflow fit, deployment style, and team needs than by isolated features alone. Based on the available metadata, it leans most clearly toward Hybrid Static Analysis with AI Agents: Combines traditional static analysis with optional local/cloud LLMs to eliminate false positives and find deep logic bugs.. A representative use case is Automating Code Quality in CI/CD: Integrate Skylos into GitHub Actions to automatically detect dead code, security vulnerabilities, and quality issues on every Pull Request, failing builds on critical findings.. The listed license is NOASSERTION. GitHub stars are currently 848. Relevant tags include Static Analysis, SAST.

This write-up is based on the project's README and public repository data. We have not hand-tested the tool.

#Static Analysis#SAST#Dead Code Detection#AI Agent#Python Security#Code Quality#CI/CD#Multi-language
$ Install
$ pip install skylos
↗ Visit site★ GitHub
01

Features

01Hybrid Static Analysis with AI Agents: Combines traditional static analysis with optional local/cloud LLMs to eliminate false positives and find deep logic bugs.
02Comprehensive Code Auditing: Detects dead code, security vulnerabilities (SAST including SQLi, SSRF, secrets), and code quality issues (complexity, nesting) across multiple languages.
03Automated Remediation & CI/CD Integration: Offers automated fixes and end-to-end remediation via AI agents, and seamlessly integrates into CI/CD pipelines for PR guarding, annotations, and quality gates.
04Multi-Language Support & Privacy-First: Supports Python, TypeScript, and Go with 100% local analysis options, ensuring code privacy.
02

Why choose it

+Hybrid Static Analysis with AI Agents: Combines traditional static analysis with optional local/cloud LLMs to eliminate false positives and find deep logic bugs.
+Comprehensive Code Auditing: Detects dead code, security vulnerabilities (SAST including SQLi, SSRF, secrets), and code quality issues (complexity, nesting) across multiple languages.
+Automating Code Quality in CI/CD: Integrate Skylos into GitHub Actions to automatically detect dead code, security vulnerabilities, and quality issues on every Pull Request, failing builds on critical findings.
+Supports 7 platforms or runtime environments.
03

Trade-offs

!The final decision should still be made through side-by-side comparison with similar tools.
04

Compatibility

Python
Language
Verified via docs
TypeScript
Language
Verified via docs
Go
Language
Verified via docs
GitHub Actions
CI/CD
Verified via docs
VS Code
IDE Extension
Verified via docs
Ollama
Local LLM
Verified via docs
05

Quick start

1
$ pip install skylos
06

Use cases

↳Automating Code Quality in CI/CD: Integrate Skylos into GitHub Actions to automatically detect dead code, security vulnerabilities, and quality issues on every Pull Request, failing builds on critical findings.
↳Deep Security Auditing of Python, TypeScript, and Go Applications: Perform comprehensive SAST, including taint analysis, secrets detection, and vulnerability checks, across multi-language repositories.
↳Intelligent Dead Code Elimination and Codebase Optimization: Accurately identify and safely remove unreachable functions, classes, and unused imports, leveraging hybrid analysis to distinguish true dead code from framework magic.
↳AI-Assisted Code Remediation and PR Review: Utilize AI agents for context-aware audits, automated fixes, and end-to-end remediation, including generating and validating fixes, and posting inline PR review comments.
07

Alternatives

⚡Top VS:
VSaguara★94→VSjadx-mcp-server★808→VSragflow★92.6k→VSrust-doctor★21→
aguara logo
aguara★ 94
Security scanner for AI agent skills & MCP servers. 173 detection rules. 13 categories. 5 registries monitored daily. OpenClaw detection included. No API keys, no cloud, no LLM. One binary. Detection engine behind Oktsec.
VSCompare→
jadx-mcp-server logo
jadx-mcp-server★ 808
MCP server for JADX-AI Plugin
VSCompare→
ragflow logo
ragflow★ 92.6k
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
VSCompare→
rust-doctor logo
rust-doctor★ 21
Your agent writes bad Rust. This catches it.
VSCompare→
GPT Researcher logo
GPT Researcher★ 30.2k
An autonomous agent that conducts deep research on any data using any LLM provider, producing detailed reports with citations from web and local sources.
VSCompare→
AgentGuide logo
AgentGuide★ 11.1k
https://adongwanai.github.io/AgentGuide | AI Agent开发指南 | LangGraph实战 | 高级RAG | 转行大模型 | 大模型面试 | 算法工程师 | 面试题库 | 强化学习|数据合成
VSCompare→
AIGC-Interview-Book logo
AIGC-Interview-Book★ 5.0k
【三年面试五年模拟】AIGC算法工程师面试秘籍。涵盖AIGC、传统深度学习、自动驾驶、AI Agent、机器学习、计算机视觉、自然语言处理、强化学习、大数据挖掘、具身智能、元宇宙、AGI等AI行业面试笔试干货经验与核心知识。
VSCompare→
zotero-mcp logo
zotero-mcp★ 5.5k
Zotero MCP: Connects your Zotero research library with Claude and other AI assistants via the Model Context Protocol to discuss papers, get summaries, analyze citations, and more.
VSCompare→
See all alternatives →

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Compatibility05Quick start06Use cases07Alternatives
duriantaco /
skylos
↗

High-precision Python SAST & Dead Code Remover. Finds unused functions, secrets, and security flaws with hybrid static analysis + local LLM agents. Privacy-first & low noise. MCP server for SAST too. Docs: https://docs.skylos.dev/

848
Last commitToday
StatusActive
CategoryRAG / Knowledge Base
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.