
swain.
your open source local AI security lead. one command.
What it does
the machines write the code now. swain watches what they write. one command before you ship, local AI security review using the claude and codex CLIs you already have. no new accounts. no SaaS. no dashboard. catches auth bugs, billing bypasses, hardcoded secrets, SQL injection, XSS. ends with one thing: the exact issue blocking your launch and the exact command to fix it. nothing the machine writes passes unseen.
Does a similar job
all alternatives →
Swytchcode CLIJun 2026 · swytchcode.com · ▲449Give agents reliable access to 2,000+ APIs w/ durable state


DexCodeMar 2026 · co-r-e.github.io · ▲94Your AI Agent builds the Deck & you never leave the terminal
- FLFree local security checks for AI coding in VSCode, Cursor and Windsurf2025 · ▲43
Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…
More dev tools this month
the category →



OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com

Open-source GTM skills for technical founders
Dev tools · 30d ago · gtmcofounder.com

Launched alongside, May 2026
the whole month →

Parallel agents, diff reviewer, and multi-model comparisons
Dev tools · May 2026 · kilo.ai


- NW
Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…
Life & fun · May 2026 · github.com
- FM
Dev tools · May 2026 · github.com