skills.rest
MichelKerkmeester
MichelKerkmeesterCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

mcp-narsil

Execute security scanning and code intelligence across 15 languages with 76 tools.

31|3|Updated Dec 23, 2025
Search Tags:#security#call-graph#symbol-search#code-intelligence#mcp-narsil
One-click install
npx skills add https://github.com/MichelKerkmeester/Opencode_Dev_Environment --skill mcp-narsil
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mcp-narsil
Source: https://github.com/MichelKerkmeester/Opencode_Dev_Environment/tree/main/.opencode/skill/mcp-narsil
Command: npx skills add https://github.com/MichelKerkmeester/Opencode_Dev_Environment --skill mcp-narsil

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) and scripts (resource) components.

What problem does it solve?

Narsil MCP delivers deep code intelligence with a wide toolset (security scanning, call graphs, symbol searches, and more), enabling advanced analysis and automation directly through MCP servers.

Core Features & Use Cases

  • 76 specialized tools for security, structure, and code analysis
  • Call graph, symbol search, data flow, and SBOM support
  • Local, offline-capable execution via Code Mode on demand
  • Extensive integration with multiple MCP servers for multitool workflows

Quick Start

narsil_get_call_graph({ function_name: "main" })

Frequently Asked Questions about mcp-narsil

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform security scanning on my codebase for OWASP and CWE vulnerabilities?▼

Security scanning analyzes code for known vulnerability patterns. Narsil executes comprehensive scanning across 15 languages, checking against OWASP Top 10 and CWE Top 25 standards with taint analysis to identify data-flow risks, enabling vulnerability detection during code reviews and onboarding without external services.

Can I generate call graphs and trace function dependencies across my repository?▼

Call-graph analysis maps function calls and dependencies within your codebase. Narsil generates call graphs using Tree-sitter parsing, revealing function relationships and execution paths across multiple languages to support architecture understanding and impact analysis.

What's the best way to search for symbols and perform code intelligence queries across a large codebase?▼

Symbol search combines full-text and semantic search to locate functions, classes, and definitions. Narsil indexes symbols across your repository, enabling fast lookups and data-flow analysis through 76 specialized tools, reducing manual code navigation time.

How do I check software supply-chain security and generate SBOMs for license compliance?▼

Supply-chain checks identify dependencies and licensing risks in your codebase. Narsil performs SBOM generation and license analysis to audit third-party components, satisfying compliance requirements during security investigations and onboarding workflows.

Can I run code analysis offline without sending code to external services?▼

Local, offline analysis keeps your code private while performing deep inspection. Narsil operates entirely on-demand via Code Mode with local execution, enabling Tree-sitter parsing, control-flow analysis, and security checks without external dependencies or token overhead.

Does this work with multiple programming languages and repository structures?▼

Multi-language support means one tool handles diverse codebases. Narsil covers 15 languages with 76 tools, applying consistent security scanning, call-graph analysis, and symbol search across different repository layouts and frameworks in a single workflow.

Related Skills

Explore More Software Engineering Skills→
xberg-ioxberg-io
26

using-the-mcp-server

Parse source code and detect programming languages via the tree-sitter-language-pack MCP server.

Official
Intermediate
randalmurphalrandalmurphal

Vulnerability Triage & Prioritization

Compute CVSS scores and prioritize vulnerabilities with weighted ranking.

Community
Basic
iiammaeiiammae

audit-augmentation

Map SARIF and weAudit findings onto Trailmark code graphs for security audits.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced