duriantaco/skylos
High-precision Python SAST & Dead Code Remover. Finds unused functions, secrets, and security flaws with hybrid static analysis + local LLM agents. Privacy-first & low noise. MCP server for SAST too. Docs: https://docs.skylos.dev/
Overview
duriantaco/skylos is a Python MCP server licensed under Apache-2.0. High-precision Python SAST & Dead Code Remover. Finds unused functions, secrets, and security flaws with hybrid static analysis + local LLM agents. Privacy-first & low noise. MCP server for SAST too. Docs: https://docs.skylos.dev/ Topics: python, security, code-quality, code-quality-analyzer, dead-code, dead-code-detection, devsecops, llm-agent, llm-agents, sast, static-analysis, mcp, mcp-server, typescript, llm, ai-code-review, ai-generated-code, golang, prompt-injection, vibe-coding.
Ranked #21 out of 25632 indexed tools.
In the top 1% of all indexed tools.
Used by 11 other projects.
Actively maintained with commits in the last week.
Ecosystem
Signal Breakdown
Badge
[](https://agentrank-ai.com/tool/duriantaco--skylos) <a href="https://agentrank-ai.com/tool/duriantaco--skylos"><img src="https://agentrank-ai.com/api/badge/tool/duriantaco--skylos" alt="AgentRank"></a> Matched Queries
From the README
<div align="center">
<h1>Skylos: Security Scanner, Dead Code Detector & Vibe Coding Analyzer</h1>
<h3>Find security vulnerabilities, dead code, and vibe coding defects in Python, TypeScript, and Go. Agentic AI fixes and MCP integration.</h3>
</div>
⭐ If Skylos saves you time (or has helped you in any way), please star the repo — it helps a lot.
💬 Join the Discord (support + contributors): https://discord.gg/Ftn9t9tErf
📖 **[Website](https://skylos.dev)** · **[Documentation](https://docs.skylos.dev)** · **[Blog](https://skylos.dev/blog)** · **[VS Code Extension](https://marketplace.visualstudio.com/items?itemName=oha.skylos-vscode-extension)**
---
### Why Skylos over Vulture?
| | Skylos | Vulture |
|:---|:---|:---|
| **Recall** | **98.1%** (51/52) | 84.6% (44/52) |
| **False Positives** | **220** | 644 |
| **Framework-aware** (FastAPI, Django, pytest) | Yes | No |
| **Security scanning** (secrets, SQLi, SSRF) | Yes | No |
| **AI-powered analysis** | Yes | No |
| **CI Read full README on GitHub →