skylos

MCP.Pizza Chef: duriantaco

Skylos reads a repository or a single pull request and reports what is wrong before anyone approves it: functions and files nothing calls, passwords committed by accident, dependencies with known holes, and code that has quietly got harder to follow. It also has checks built specifically for AI-written code, catching invented helper functions, made-up package features and missing guards. It runs on your machine by default, covers a dozen languages, and can generate a workflow that blocks bad merges automatically.

Coding

Use This MCP server To

Find code nobody calls anymore before I delete it Catch a password accidentally committed to the repo Check whether AI-written code invented a function Scan a pull request before approving it See which dependencies have known security holes Add a check that blocks bad merges automatically

README

MCP Toplist

Skylos

Skylos

Open-source, local-first checks for dead code, security issues, secrets, quality regressions, and AI-code mistakes before merge.

License: Apache 2.0 codecov PyPI - Python Version PyPI version VS Code Marketplace Astronomer Trust Discord

skylos FAQ

Can I use this to check code an AI wrote for me?
Yes — there are dedicated checks for made-up helper functions, invented package features and missing guards.
Which languages does it cover?
Python, TypeScript, JavaScript, Java, Go, Kotlin, PHP, Rust, Dart, C# and shell scripts.
Does my code get uploaded anywhere?
No. It runs locally by default, and can also be used as a gate in your own build pipeline.
How hard is setup?
Two commands: install it, then run it in your project folder.
Is there an editor version?
Yes, there is a VS Code extension, and it can generate a GitHub Actions workflow for you.
Does it cost anything?
No. It is open source under Apache 2.0.