Open Source AI Coding Tools - Page 12

security-audit is a coding-agent skill for running structured security audits on software repositories. It organizes the audit into multiple phases so the agent does not simply search randomly for vulnerabilities. The workflow begins with reconnaissance, then moves into parallel hunting across attack classes such as injection, access control, business logic, cryptography, feature abuse, and chained attacks. Findings are then challenged through separate validation agents to reduce false positives. The skill produces human-readable reports, detailed finding traces, structured JSON output, and independent verification against the actual source code. Overall, it is designed to make AI-assisted security review more systematic, adversarial, and evidence-based.

windsurf.vim is a plugin for Vim and Neovim by Exafunction (formerly part of the Codeium project) that brings in AI-driven code completion and assistance capabilities. The aim is to provide a “free, ultrafast” alternative to other AI code assistants (such as GitHub Copilot) directly within Vim/Neovim. Once installed and configured, windsurf.vim can suggest code completions, generate multi-line snippets based on comments or invitation in code, and make the editing experience more predictive and context-aware. The plugin supports major programming languages and allows you to trigger completions as you type—especially after comments or partial code constructs. Because it is designed to integrate with Vim’s editing model, it offers suggestions in-line and leverages virtual text or inline indicators when supported. Many developers using Neovim look to this plugin as a way to bring modern AI-powered code-assistance into their terminal-centric workflow.