Documentation for Skylos - a static analysis tool for Python that finds dead code, security vulnerabilities, and code quality issues.
| Doc | Description |
|---|---|
| Introduction | What is Skylos, core capabilities, supported languages |
| Installation | Setup and configuration |
| CLI Reference | All command-line options |
| Why Skylos | Comparison with other tools |
| Doc | Description |
|---|---|
| Dead Code Detection | Find unused functions, imports, classes, variables |
| Smart Tracing | Runtime call tracing with --trace to catch dynamic dispatch |
| Security Analysis | Taint analysis, SQL injection, secrets detection |
| Code Quality | Complexity, nesting, structure checks |
| Framework Awareness | Django, Flask, FastAPI, Pytest support |
| Doc | Description |
|---|---|
| Quality Gate | Block bad code with ratchet workflow |
| CI/CD Integration | GitHub Actions, GitLab, Jenkins, Azure DevOps |
| Doc | Description |
|---|---|
| AI Features | --fix and --audit with OpenAI/Anthropic |
Skylos is fully functional offline and free. Pro/Enterprise adds team governance and CI/CD workflow features.
| Capability | Free (Local) | Pro / Enterprise |
|---|---|---|
| Dead code detection | ✅ | ✅ |
Security scanning (--danger) |
✅ | ✅ |
Quality checks (--quality) |
✅ | ✅ |
Smart tracing (--trace) |
✅ | ✅ |
| AI fix/audit (BYOK) | ✅ | ✅ |
| Quality Gate | CLI exit codes | + Wait/poll for dashboard approval |
| Override method | --force (local bypass) |
Dashboard button (audit logged) |
| Finding suppression | Local only | Team-governed + persistent |
| Strict mode | ❌ Anyone can bypass | ✅ Admin-controlled |
| Baseline | Local history | Cloud baseline on main (team-wide) |
| GitHub check status | Basic pass/fail | Updates on approval |
- Teams needing shared baselines across developers
- Compliance requiring audit logs for overrides and suppressions
- CI/CD workflows that should wait for approval instead of failing
- Governance where admins control who can bypass gates
- You're a solo developer or small team
- Local
--forcebypass is acceptable - You don't need audit trails for overrides
- CLI exit codes work for your CI pipeline
These docs are built with Docusaurus.
- Node.js 18+
- npm or yarn
# Install dependencies
npm install
# Start dev server
npm startDocs will be available at http://localhost:3000.
# Build static files
npm run build
# Serve build locally
npm run servePush to main branch to trigger automatic deployment via Vercel/Netlify/GitHub Pages.