Skylos

关于

Skylos is a cutting-edge, privacy-first tool designed to elevate the quality and security of Python applications. It leverages a unique hybrid static analysis engine combined with optional local LLM agents to accurately identify dead code, critical security vulnerabilities like SQL injection and hardcoded secrets, and subtle code quality issues. By understanding dynamic Python patterns and offering runtime validation, Skylos significantly reduces false positives common in traditional linters, empowering developers to proactively clean, optimize, and secure their codebase with confidence.

主要功能

• 306 GitHub stars
• Hybrid Static Analysis & LLM Agents for high-precision Python SAST and dead code detection.
• Automated Remediation Agent capable of scanning, fixing, testing, and opening Pull Requests.
• Comprehensive Python Security Scanner with taint analysis, secrets detection, and vulnerability checks.
• Intelligent Dead Code Detection, accurately distinguishing between truly unused code and dynamic framework elements like Pytest fixtures.
• Multi-language support for Python (AST) and TypeScript (Tree-sitter) with built-in parsers and specific rule sets.

使用案例

• Performing automated security audits and vulnerability scanning in Python projects.
• Optimizing codebases by identifying and safely removing unreachable functions and unused imports.
• Implementing quality gates and automated remediation workflows in CI/CD pipelines for Python and TypeScript.