
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
AI-powered developer tools - index your codebase for AI agents and auto-configure pre-commit hooks
AI-powered developer tools that help AI agents understand and work with your codebase.
Agentifind provides two capabilities:
Codebase Indexing - Analyze your repository to extract symbols, conventions, boundaries, and test mappings. Expose this data via MCP (Model Context Protocol) so AI coding agents can query your codebase intelligently.
Pre-commit Setup - Automatically configure pre-commit hooks tailored to your project's tech stack using AI analysis.
You don't need to clone this repository. Just run via npx in your project:
# Index your codebase for AI agents
cd /path/to/your/repo
npx agentifind init
# Or set up pre-commit hooks
export ANTHROPIC_API_KEY="sk-ant-..." # or OPENAI_API_KEY
npx agentifind configure-precommit
npx agentifind init # Index codebase for AI agents
npx agentifind configure-precommit # Set up pre-commit hooks
npm install -g agentifind
# Then use without npx
agentifind init
agentifind configure-precommit
init)Index your codebase so AI coding agents can understand its structure, conventions, and boundaries.
npx agentifind init
Output:
[1/4] Analyzing repository structure...
[2/4] Inferring coding conventions...
[3/4] Detecting module boundaries...
[4/4] Configuring MCP server...
✓ Created .mcp.json with agentifind server
Restart Claude Code to load the MCP server
.agent/ folder (code index):
.agent/
├── index.json # Symbols, references, imports
├── conventions.md # Inferred coding conventions
├── boundaries.md # Public API vs internal
├── test-map.json # Test to source mappings
└── entrypoints.json # Main functions, CLI commands, handlers
.mcp.json (auto-configured for Claude Code):
{
"mcpServers": {
"agentifind": {
"type": "stdio",
"command": "npx",
"args": ["-y", "agentifind", "serve"]
}
}
}
The MCP server exposes 6 tools that AI agents can use:
| Tool | Purpose |
|---|---|
get_conventions | Get coding conventions for a topic |
find_callers | Find all callers of a function |
get_tests_for | Find tests for a file/function |
trace_path | Trace call path between symbols |
get_boundaries | Check if code is public/internal |
related_files | Find related files |
agentifind init [OPTIONS] [REPO_PATH]
Options:
--languages <list> Comma-separated languages to analyze (default: auto-detect)
--skip-conventions Skip LLM-based convention inference (faster, no API key needed)
--verbose, -v Show detailed progress
--help, -h Show help
Set an API key to enable LLM-based convention inference:
export ANTHROPIC_API_KEY="sk-ant-..." # or OPENAI_API_KEY
npx agentifind init
Without an API key, convention inference is skipped but all other features work.
configure-precommit)Automatically configure pre-commit hooks for your repository using AI analysis.
export ANTHROPIC_API_KEY="sk-ant-..." # or OPENAI_API_KEY
npx agentifind configure-precommit
| Category | Tools |
|---|---|
| Python | ruff, ruff-format, mypy, bandit |
| JavaScript/TypeScript | eslint, prettier |
| Go | golangci-lint, go-fmt, go-imports |
| Java | pretty-format-java |
| Shell | shellcheck |
| Terraform | terraform_fmt, tflint, checkov |
| Docker | hadolint |
| YAML | yamllint, check-yaml |
| JSON | check-json |
| Security | gitleaks, detect-private-key |
| General | trailing-whitespace, end-of-file-fixer, check-merge-conflict, no-commit-to-branch |
agentifind configure-precommit [OPTIONS] [REPO_PATH]
Options:
--dry-run Generate config without installing hooks
--skip-autoupdate Skip running pre-commit autoupdate
--debug Enable debug output
--help, -h Show this help message
┌─────────────────────────────────────────────────────────────────┐
│ Phase 1: SENSOR │
│ └── Scan repo structure, detect languages/frameworks │
│ │
│ Phase 2: AUDITOR (LLM) │
│ └── AI analyzes repo, generates optimal pre-commit config │
│ │
│ Phase 3: BUILDER │
│ ├── Write .pre-commit-config.yaml │
│ ├── Run pre-commit autoupdate (get latest versions) │
│ └── Install git hooks │
│ │
│ Phase 4: VERIFICATION & SELF-HEALING │
│ ├── Run pre-commit on all files │
│ └── If config errors → AI debugger fixes → retry (max 3x) │
│ │
│ Phase 5: SUMMARY │
│ └── Report installed hooks and any code issues found │
└─────────────────────────────────────────────────────────────────┘
agentifind <command> [options]
Commands:
init Index your codebase for AI agents (creates .agent/)
configure-precommit Auto-configure pre-commit hooks using AI analysis
serve Start the MCP server for AI agent integration
query Query the index directly from command line
help Show help
Global Options:
-h, --help Show help message
-v, --version Show version
agentifind query get_conventions --topic=error_handling
agentifind query find_callers --symbol=main
agentifind query get_tests_for --target=src/index.ts
agentifind query trace_path --from=main --to=handleRequest
agentifind query get_boundaries --target=lib/
agentifind query related_files --file=src/parser.ts
git init)For Claude Desktop (not Claude Code), add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"agentifind": {
"command": "npx",
"args": ["-y", "agentifind", "serve"],
"cwd": "/path/to/your/repo"
}
}
}
git clone https://github.com/avivkaplan/agentifind.git
cd agentifind
npm install
npm run build
./tests/run_tests.sh
MIT
FAQs
Codebase intelligence for AI agents - extracts code structure and validates code quality
The npm package agentifind receives a total of 5 weekly downloads. As such, agentifind popularity was classified as not popular.
We found that agentifind demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.