Outils

Sets up an isolated workspace before feature work: uses the agent's built-in worktree tool when available, otherwise falls back to git worktree, then installs dependencies and runs baseline tests to confirm a clean start. From Superpowers.

Before finishing a task or merging, dispatches an independent reviewer subagent over a git commit range to check the work against the plan and requirements, then handles feedback by severity: critical, important, minor. Part of obra/superpowers.

Official MCP reference server for local Git repos: view status and diffs, stage and commit, create and switch branches, and search the commit log by date. Written in Python and runs with uvx; still in early development.

AI pair programming in your terminal: builds a repo map of the whole codebase, auto-commits changes to git, works with Claude, DeepSeek, OpenAI and almost any other model including local ones, and can run lint and tests after edits.

Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

Git worktree manager (wt) built for running multiple AI agents in parallel: create, switch and clean up worktrees by branch name, and spin up a worktree and launch Claude in one command. Supports hooks, LLM-generated commit messages and one-step merges.

From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.

Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.