Skylos

by duriantaco

630 downloads

Not rated

GitHub

About

Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with 3x fewer false positives than Vulture. 5 tools: analyze, security_scan, quality_check, secrets_scan, remediate. AI-powered auto-fix agent.

Details

Author: duriantaco
Downloads: 630
Categories: Developer Tools, Security

- Privacy-first: 100% local analysis with optional local LLMs
- Taint analysis for SQLi, XSS, and untrusted input tracking
- Secrets detection (AWS, Stripe, OpenAI keys, etc.)
- Dead code detection with confidence scoring and safe removal
- Vibe coding guardrails (phantom calls, unfinished stubs, AI hallucination patterns)
- AI supply chain security (prompt injection, zero-width characters, homoglyphs)
- Agentic AI remediation that fixes and opens PRs automatically
- CI/CD quality gates and inline PR review comments

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Skylos

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

From the repository

Install via pip (pip install skylos) and run commands like skylos . to scan for dead code, skylos . --secrets --danger --quality for security and quality audits, or skylos agent analyze . --model gpt-4.1 for AI-powered analysis. For CI/CD, run skylos cicd init to generate a GitHub Actions workflow in 30 seconds.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "skylos": {
            "skylos": {
                "command": "python3",
                "args": [
                    "-m",
                    "skylos_mcp.server"
                ]
            }
        }
    }
}

McpServers

{
    "skylos": {
        "command": "python3",
        "args": [
            "-m",
            "skylos_mcp.server"
        ]
    }
}

What is Skylos?

> Skylos is a privacy-first SAST tool for Python, TypeScript, and Go that bridges the gap between traditional static analysis and AI agents. It detects dead code, security vulnerabilities (SQLi, SSRF, Secrets), and code quality issues with high precision.

Unlike standard linters (like Vulture or Bandit) that struggle with dynamic Python patterns, Skylos uses a hybrid engine (AST + optional Local/Cloud LLM). This allows it to:

1. Eliminate False Positives: Distinguishes between truly dead code and framework magic (e.g., pytest.fixture, FastAPI routes).
2. Verify via Runtime: Optional --trace mode validates findings against actual runtime execution.
3. Find Logic Bugs: Goes beyond linting to find deep logic errors that regex-based tools miss.

---

🚀 New to Skylos? Start with CI/CD Integration

```bash

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

Claude Desktop / Cursor

McpServers

What is Skylos?

🚀 New to Skylos? Start with CI/CD Integration

Install

More like this

Sentry

Github

Git

GitLab

Context 7

Playwright