Add skylos tool for dead code detection and security

[duriantaco]

Project

Skylos

Checklist

• One project per PR
• PR title format: Add project-name
• Entry format: * [project-name](url) - Description ending with period.
• Description is concise and short

Why This Project Is Awesome

Which criterion does it meet? (pick one)

• Industry Standard - The go-to tool for a specific use case
• Rising Star - 5000+ stars in < 2 years, significant adoption
• Hidden Gem - Exceptional quality, solves niche problems elegantly

Explain:
Skylos is a framework-aware alternative to Vulture (already listed). We benchmarked both tools on 9 of the most popular Python repositories on GitHub (350k+ combined stars) with every finding

How It Differs

The key difference is framework awareness. Vulture flags Django views, FastAPI endpoints, Pydantic model fields, and pytest fixtures as dead code because it doesn't understand framework magic. Skylos recognizes these patterns and skips them, which is why it has 3x fewer false positives.

Beyond dead code, Skylos also does taint-based security analysis, something Vulture does not do.

• 323+ GitHub stars, actively maintained, commits within last week
• 10 months old with consistent activity
• Full benchmark methodology and reproducible results: https://github.com/duriantaco/skylos-demo
• CI/CD GitHub Action, VS Code extension, MCP server for AI agents