duriantaco/skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
464 starsPythonApache-2.0pythoncode-qualitydead-codedead-code-detection
REVIEWED89/100
Scanned 2026-07-07 · gemini v1
Dimension breakdown
Security
75/100
4 findings
Quality
96/100
3 findings
License
95/100
No findings
Completeness
100/100
No findings
Findings (7)
MEDIUM: 3LOW: 2INFO: 2
- MEDIUMsecurityInsecure Deserialization (PyYAML dependency)
- MEDIUMsecurityPotential Path Traversal/Command Injection in CLI Arguments
- MEDIUMsecurityData Leakage and Prompt Injection Risk in LLM Integrations
- LOWsecurityClipboard Access via `pyperclip` Dependency
- LOWqualityNon-Standard LLM Model Name in Configuration
Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.
Maintainer of this repo?
Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.
Claim listingEmbed the badge.
Drop it into your README. Every view backlinks to this verification page.
Markdown
[](https://archimedes.market/r/duriantaco/skylos)HTML
<a href="https://archimedes.market/r/duriantaco/skylos"><img src="https://archimedes.market/api/badge/duriantaco/skylos.svg" alt="Archimedes Trust Verified"/></a>