Kern
Description
MCP review engine with 182 + rules (taint tracking, OWASP LLM01, concept model) + universal IR compiler: .kern compiles to 13 targets including Next.js, Vue, Express, and FastAPI. AGPL-3.0.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
[](https://www.npmjs.com/package/@kernlang/cli) [](https://github.com/KERNlang/kern/actions/workflows/ci.yml) [](https://github.com/KERNlang/kern/releases) [](LICENSE)
**One backend spec. Real TypeScript and Python output.** 242 review rules.
A .kern spec is ~70% fewer tokens than the TypeScript it generates — ~81% fewer than maintaining both backends (measured, GPT-class tokenizer, example corpus).
[**kernlang.dev**](https://kernlang.dev) • [MCP](https://kernlang.dev/mcp) • [Review](https://kernlang.dev/review) • [Playground](https://kernlang.dev/playground) • [Docs](https://kernlang.dev/docs) • [For LLMs](https://kernlang.dev/llm)
Install
npm install -g @kernlang/cli
kern compile api.kern --target=express # Generate an Express backend
kern compile api.kern --target=fastapi # Generate a FastAPI backend
kern check # Nominal type checker (zero false positives)
kern review src/ --recursive # Static analysis (242 rules, taint tracking)
kern context src/ --stdout # Whole-project context map for an LLM/agent
kern rag eval examples/rag-starter/eval-ci.kern --json # CI-safe RAG retrieval contract eval
kern init --template=fullstack my-app # Scaffold fullstack ap
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,