codebadger
Enables AI agents to perform precise code analysis and data flow tracing at scale, reducing time spent on security audits, refactoring, and dependency mappin…
🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs).
- Ask Claude to identify data flow paths between two functions in your codebase.
- Generate a dependency map showing how your microservices connect and share data.
- Find security vulnerabilities by analyzing control flow through authentication code.
Enables AI agents to perform precise code analysis and data flow tracing at scale, reducing time spent on security audits, refactoring, and dependency mapping while improving accuracy of findings.
Security teams and engineering leads needing automated codebase analysis for vulnerability detection and data flow visualization.
https://github.com/Lekssays/codebadger
By Lekssays
How to Get It
claude plugins install Lekssays/codebadger
Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.
Auto-generated from the tool's public listing — not hands-on verified. Cross-check against the source repo's README before running.
After installing, paste this into Claude:
Identify data flow paths between two functions in my codebase
Trust Signals Auto-scanned
Community Pulse Growing
Discussed on Hacker News
- Codebadger – MCP server for static code analysis with Joern — Hacker News · 1 pts
1 mentions across 1 sources
Reviewer notes
Auto-scanned review. These are observations, not a security certification.
Scored from trust signals (evidence-eval-v1): 113 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
Things to check
- Scanned, not hands-on tested — this entry was auto-scanned from public metadata (GitHub metrics, license, security flags). No reviewer has run it, and no tool-specific limitations have been documented yet.
- License (GPL-3.0) may restrict commercial use. Check with your legal team.
How to evaluate tools before deploying →
Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.
Evaluation
Scored from trust signals (evidence-eval-v1): 113 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.