sourcery — security grade SAFE, quality 51/100

Security audit verdict: SAFE · quality 51/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by sourcery-ai · AI Tool · ★ 1.9k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is sourcery safe to install? View the security audit →

About sourcery

Sourcery - Instant AI Code Reviews Sourcery is here to help you: Speed up your code review process Improve your code quality and ensure high quality code Spend less time on reviews Accelerate development velocity What is Sourcery Sourcery is an automated code reviewer that will review any pull request on any GitHub repository to provide instant feedback on the proposed changes. Every review will include a summary of the changes, high level feedback, and line by line suggestions/comments (where relevant). Our goal is to provide you with the type of code review you would expect to get from a colleague. We're not there yet, but we're continually working to get our reviews closer to that point. Getting Started Add Sourcery to any repo to start seeing reviews on your new pull requests. Sourcery is completely free to use for public repos/open source projects. For private repos you can try Sourcery for free for 14 days, but need a Team or Pro plan after your trial ends. Privacy & Security We use both OpenAI and Anthropic LLMs to provide pieces of our code reviews. Because of this, we need to send them sections of your code (typically the diff of the PR).

aicode-qualitycode-review-botcode-reviewspythonrefactoringsoftware-development

Quick Facts

Stars1,872
Forks100
CategoryAI Tool
LicenseMIT
Quality Score50.7510622933032/100
Open Issues120
Last Updated2026-10-06
Created2019-07-15
Est. Tokens~16k

sourcery alternative? Top 6 similar tools

Looking for a sourcery alternative? If you're comparing sourcery with other ai tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • repowise by repowise-dev · ⭐ 7.2k

    Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code det

  • ai-review by Nikita-Filonov · ⭐ 586

    🚀 AI-powered code review tool for GitHub, GitLab, Bitbucket Cloud, Bitbucket Server, Azure DevOps and Gitea —

  • roam-code by Cranot · ⭐ 517

    Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 comman

  • Gito by Nayjest · ⭐ 436

    An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as sec

  • mcp-agent by lastmile-ai · ⭐ 8.5k

    Build effective agents using Model Context Protocol and simple workflow patterns

  • code-graph-rag by vitali87 · ⭐ 5.2k

    The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI

More AI Tool Tools

Explore other popular ai tool tools:

View all AI Tool tools →

Frequently Asked Questions

What is sourcery?

sourcery is Instant AI code reviews. It is categorized as a AI Tool with 1.9k GitHub stars.

How do I install or use sourcery?

You can find installation instructions and usage details in the sourcery GitHub repository at github.com/sourcery-ai/sourcery. The project has 1.9k stars and 100 forks, indicating an active community.

What license does sourcery use?

sourcery is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to sourcery?

The top alternatives to sourcery on Agent Skills Hub include repowise, ai-review, roam-code. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse AI Tool tools