code-scalpel

Analyze code structure: parse functions, classes, imports, and complexity metrics. Use to understand a file or project without reading the source code directly.

Extract a specific function, class, or method from a file using Code Scalpel. Use when you need to show a symbol without reading the entire file—saves 95% of context.

Map project architecture: discover modules, build call graphs, visualize structure, trace critical paths. Complete architecture overview with dependency flows.

Verify code compliance with policies and standards: HIPAA, SOC2, PCI-DSS, custom style guides. Validate policy file integrity with cryptographic verification.

Safe refactoring workflow: find all usages, trace dependencies, simulate changes, generate baseline tests, then apply with backup. Behavior-preserving refactor.

Full security audit: detect local vulnerabilities, cross-file taint flows, CVEs in dependencies, and polyglot sink patterns. Complete security scan pipeline.

Install and verify the Code Scalpel MCP server. Checks if codescalpel is already installed in Claude Code, runs `claude mcp add` if needed, and confirms connection by fetching capabilities.

Generate unit tests from code paths. Uses symbolic execution to explore branches, identify edge cases, and auto-generate pytest/unittest test cases.