Open-Source
cARL
cARL (Cognitive Agent Runtime Layer) is a repository-native control layer for AI-assisted development. It defines persistent instructions, boundaries, and operating constraints so coding agents behave consistently over time. What it does Provides committed policy and behavior files for agent …
CopeLimit
CopeLimit gives a clear view of Copilot quota usage with a web dashboard and mobile widget experience. It is designed for fast “how close am I to limit?” checks without digging through account pages. What it does Displays used, remaining, and total quota with warning thresholds Supports …
SpecRecon (SpecQL + …
SpecQL-APISpy (SpecRecon) combines two complementary capabilities: static API specification analysis and runtime request inspection. What it does Uses SpeQL to analyze Azure REST specifications for risky patterns Uses APISpy to classify live Azure and Microsoft API calls in-browser Maps potential …
CSPeek
CSPeek analyzes Content-Security-Policy and Content-Security-Policy-Report-Only headers from target URLs and converts findings into explainable risk output. What it does Retrieves and parses CSP headers from HTTP responses Identifies weak, missing, or permissive policy patterns Produces …
UndREST-SpecQL
UndREST-SpecQL is the static-analysis backbone of the UndREST toolchain. It queries and inspects Azure REST specifications to expose high-value behavioral and security signals. What it does Scans Azure REST specs with CodeQL and built-in analyzers Builds structured operation indexes consumed by …
UndREST-APISpy
UndREST-APISpy is a DevTools extension that observes live API traffic and classifies requests against the SpeQL inventory model. What it does Captures Azure and Microsoft API calls during interactive workflows Labels requests with provider and operation context Uses prebuilt provider shards …