用 62 条规则扫描 Cargo 工作区，覆盖安全、正确性、性能等维度，是提升 Rust 代码质量的利器。
Article URL: https://github.com/arthjean/rust-doctor Comments URL: https://news.ycombinator.com/item?id=49366807 Points: 1 # Comments: 0
用构建失败强制服务隔离，杜绝越层调用，守护微服务架构边界。
Article URL: https://github.com/vijayagopalsb/isolation-tax Comments URL: https://news.ycombinator.com/item?id=49296427 Points: 1 # Comments: 0
聚焦Git变更文件的Python静态分析器，只审查你改的，不审查历史遗留，提升Code Review效率。
Article URL: https://github.com/mukundzha/scrut Comments URL: https://news.ycombinator.com/item?id=49219370 Points: 2 # Comments: 1
大模型生成代码安全研究新基准，揭示领域提示引发的漏洞风险变化
arXiv:2607.25225v1 Announce Type: cross Abstract: LLMs are increasingly used for code generation in critical infrastructure, yet the security effect o…
开源静态AI风险分析工具，专为AI代理设计的安全检测利器。
Article URL: https://github.com/ikaruscareer/SafeAI Comments URL: https://news.ycombinator.com/item?id=48963061 Points: 2 # Comments: 0
别再手动验证候选bug了！AnyPoC自动生成可执行测试用例，让LLM漏洞检测从"疑似"走向"实锤"，大幅提升自动化检测的可落地性。
arXiv:2604.11950v2 Announce Type: replace-cross Abstract: While recent LLM-based agents can identify many candidate bugs in source code, their reports…
用Rust构建的本地信任层，通过Datalog求解器在飞行前拦截AI代理的违规计划，为代理安全提供硬约束。
Article URL: https://github.com/lambda-alpha-labs/Graphenium Comments URL: https://news.ycombinator.com/item?id=48815458 Points: 1 # Comments: 0
用分离逻辑核心为LLM漏洞检测提供可靠基础，兼顾召回率与精度，值得安全研究者细读
Article URL: https://lambdasec.github.io/Frame-Grounding-LLM-Vulnerability-Detection-with-a-Sound-Separation-Logic-Core/ Comments URL: https://news.yc…
AI代理驱动的Android应用安全测试工具，自动执行静态/动态分析、认证流程与云端模拟，突破被动APK扫描局限。
Hi HN, I am the creator of Exfault. I am building autonomous AI agents that find vulnerabilities in Android apps. I have noticed there are growing num…
融合大模型与代码属性图静态分析，自动合成ACSL形式化规格，让C程序验证更省力。
arXiv:2606.20969v1 Announce Type: new Abstract: Generating formal specifications for C programs remains a challenge in formal verification due to the …
LLM生成样式代码常偏离设计系统，如何让AI输出可控？本文提出构建“LLM安全设计系统”的解法，直击AI辅助设计的痛点。
Article URL: https://polar.sh/blog/orbit-llm-safe-design-system Comments URL: https://news.ycombinator.com/item?id=48558134 Points: 1 # Comments: 0
实证评估开源LLM代理能否替代传统SAST工具，结果可能颠覆安全测试领域。
arXiv:2606.11672v1 Announce Type: cross Abstract: This paper explores the value of agentic AI tools for cybersecurity purposes. We evaluate the effica…
编译时拦截AI的恶意代码注入，用静态检查保障系统安全
Article URL: https://github.com/typescope/jo Comments URL: https://news.ycombinator.com/item?id=48412229 Points: 5 # Comments: 1
用大模型驱动可靠的抽象解释，SAIL方法让静态分析兼顾精度与效率
arXiv:2511.13663v2 Announce Type: replace-cross Abstract: How to construct globally sound abstract interpreters to safely approximate program behavior…
零配置扫描MCP服务器安全，无需联网和API密钥，一键检测插件风险。
Article URL: https://github.com/allenwu-blip/mcpaudit Comments URL: https://news.ycombinator.com/item?id=48240714 Points: 1 # Comments: 0
PVS-Studio深度整合Unity脚本特性，用20+专属规则精准揪出代码隐患，让游戏开发更稳更快。
In early May, Unity opened its built-in Unity Agent to all users. It runs in two modes. In chat mode, the AI assistant suggests improvements to game m…
开源工具Big Indexer通过行为聚类而非导入关系索引代码，旨在提升大型代码库中AI代理的响应准确率与速度，欢迎试用反馈。
Static Architectural analysis for large codebases, Big Indexer do behavioral code clustering for the purpose of more accurate/faster agentic tools res…