gearbox

Count lines of code, blank lines, comment lines, and files by language. Use when quickly assessing the size, complexity, and composition of a repository during an audit.

Python dependency health checker. Use to audit Python projects for missing dependencies, unused imports, transitive dependencies, and other dependency-related issues.

Official Go vulnerability scanner by the Go team. Use when auditing Go repositories to check for known vulnerabilities in dependencies using the Go vulnerability database.

Static code analysis tool for finding bugs and security issues. Use when auditing code quality, detecting OWASP vulnerabilities, or running custom code pattern matching across Python, Go, TypeScript, and many other languages.

Security vulnerability scanner for containers and code. Use when auditing a repository for known CVEs, security issues in dependencies, or supply-chain risks. Supports Python, Go, Node.js, Docker images, and more.

Find and remove unused TypeScript imports. Use when auditing TypeScript/JavaScript projects to identify dead code and clean up import statements.

Query official library/framework documentation. Use when looking up API references, usage examples, or official best practices for a specific library or framework. Invoke when analyzing code that uses unfamiliar dependencies.

GitHub CLI operations. Use for querying repository info, searching repos, managing issues and PRs, and interacting with GitHub APIs. Invoke when auditing repos or performing GitHub operations.