Skills tagged: static-analysis

• java-sdk-validation - Validate Java code targeting Azure SDK for Java

  azure-sdkjavacode-reviewvalidation

  ★ 3 · Updated 2026-09-24

  Reviews Java code for Azure SDK conventions, flagging legacy dependencies, authentication anti-patterns, and async usage.

  ⚙ Check build file dependency declarations⚙ Scan Java imports for legacy packages⚙ Verify token-based authentication usage
• security-review - Security code review for high-confidence vulnerabilities.

  security-reviewvulnerability-scanowaspcode-review

  ★ 602 · Updated 2026-09-24

  Performs security code reviews to identify high-confidence exploitable vulnerabilities aligned with OWASP 2025.

  ⚙ Parse output path configuration⚙ Analyze git diff and status⚙ Execute automated security scans
• review-semgrep - Review Semgrep Security Findings

  semgrepsecuritystatic-analysisvulnerability-triage

  ★ 18 · Updated 2026-09-23

  Review and triage Semgrep security scan results to identify true positive vulnerabilities.

  ⚙ Extract Semgrep scan findings⚙ Triage vulnerability findings⚙ Analyze source code context
• semgrep - Semgrep Security Scan

  semgrepstatic-analysissecurity-auditvulnerability-scan

  ★ 5 · Updated 2026-09-22

  Runs static analysis scans on codebases using parallel subagents and merges SARIF output.

  ⚙ Detect target codebase languages⚙ Check Semgrep Pro availability⚙ Run parallel static analysis scans
• sonarqube-gate - Autonomous SonarQube Quality Gate agent for Go and Java

  sonarqubequality-gategolangjava

  ★ 0 · Updated 2026-09-21

  Runs tests, executes Sonar Scanner, queries SonarQube APIs, and automatically fixes code issues until the Quality Gate passes for Go and Java projects.

  ⚙ Locate project root directory⚙ Create Makefile if missing⚙ Update sonar-project.properties exclusions
• Frontend Mobile Security Xss Scan - XSS Vulnerability Scanner for Frontend Code

  xssfrontend-securitycode-scannervulnerability-detection

  ★ 8 · Updated 2026-09-21

  Analyze React, Vue, Angular, and JavaScript code to identify XSS injection points, unsafe DOM manipulation, and improper sanitization.

  ⚙ Scan codebase for XSS vulnerabilities⚙ Detect unsafe DOM HTML manipulations⚙ Detect framework-specific XSS risks
• frontend-mobile-security-xss-scan - XSS Vulnerability Scanner for Frontend Code

  xsssecurityfrontendstatic-analysis

  ★ 1 · Updated 2026-09-21

  Analyze React, Vue, Angular, and JavaScript code to identify XSS vulnerabilities, unsafe DOM manipulation, and improper input rendering.

  ⚙ Scan codebase for XSS vulnerabilities⚙ Detect framework-specific XSS risks⚙ Generate XSS vulnerability report
• program-opengrep - Opengrep SAST engine guide and rule engineering.

  opengrepsaststatic-analysissecurity

  ★ 10 · Updated 2026-09-20

  Provides operational guidance, CLI usage, YAML rule syntax, taint analysis, rule testing, and CI/CD integration for the Opengrep SAST engine.

  ⚙ Scan source code for vulnerabilities⚙ Execute taint analysis on code⚙ Test custom YAML rules
• angular-template-sanitizer-security-review - Angular Template Sanitizer Security Review

  angularsecuritysanitizerxss

  ★ 22 · Updated 2026-09-20

  Statically review Angular templates and components for injection vulnerabilities, sanitizer bypass calls, and dynamic iframe security attributes.

  ⚙ Review DomSanitizer bypass calls⚙ Assess innerHTML bindings safety⚙ Review dynamic iframe security attributes
• msdmd - Module Self-Declared Metadata in Markdown specification.

  metadatamarkdownparsercode-convention

  ★ 2 · Updated 2026-09-20

  Declares and parses structured module metadata directly within source code comment blocks across multiple programming languages.

  ⚙ Parse metadata comment blocks⚙ Walk source code trees⚙ Detect language comment markers
• sddl-code-review - 4R code review protocol for sdd-lite

  code-review4r-protocolsdd-litestatic-analysis

  ★ 0 · Updated 2026-09-20

  Triages frozen diffs, executes read-only lens reviews, corroborates severe findings, and generates a review ledger.

  ⚙ Triage target diffs into risk tiers⚙ Execute read-only lens code reviews⚙ Corroborate severe inferential findings
• malware-triage - Perform static analysis and triage of suspicious files

  malware-analysisstatic-analysisdfirtriage

  ★ 3 · Updated 2026-09-19

  Perform static malware analysis to extract hashes, strings, metadata, headers, and indicators without file execution.

  ⚙ Extract hashes and file metadata⚙ Analyze ASCII and Unicode strings⚙ Analyze PE and ELF binary headers
• review - Standalone diff review

  code-reviewgit-diffstatic-analysissecurity-audit

  ★ 2 · Updated 2026-09-19

  Runs the review engine against a git diff to report findings and verdicts in conversation without state persistence.

  ⚙ Resolve base ref and diff⚙ Run Stage 0 detectors⚙ Launch parallel LLM reviewers
• variant-scan - Multi-pass variant scanning with adversarial verification

  variant-analysisvulnerability-scanningstatic-analysissecurity-audit

  ★ 19 · Updated 2026-09-19

  Executes three seed-diverse find passes over a target codebase and adversarially verifies candidate findings.

  ⚙ Run blind find passes⚙ Run threat-model find passes⚙ Run CVE-seeded find passes
• dotnet-slopwatch - LLM anti-cheat quality gate for .NET projects.

  dotnetslopwatchquality-gatestatic-analysis

  ★ 2 · Updated 2026-09-18

  Runs Slopwatch CLI to detect LLM reward hacking such as disabled tests and suppressed warnings in .NET code.

  ⚙ Run Slopwatch CLI quality checks⚙ Initialize project baseline file⚙ Update existing analysis baseline
• electron-dissection-stinger - Dissect and reverse engineer Electron desktop applications.

  electronasarreverse-engineeringstatic-analysis

  ★ 84 · Updated 2026-09-18

  Locate app.asar archives, inspect metadata, unpack assets, decode JavaScript bundles, and attach debuggers over CDP for Electron desktop apps.

  ⚙ Locate Electron application resources directory⚙ Read ASAR archive metadata⚙ Unpack ASAR file contents
• fsharp-reviewer - F# code reviewer for functional idioms and performance

  fsharpcode-reviewdotnetstatic-analysis

  ★ 0 · Updated 2026-09-18

  Reviews F# code changes for security, error handling, functional idioms, type safety, code quality, and performance against defined standards.

  ⚙ Inspect recent F# code changes⚙ Run F# build and format checks⚙ Execute test suite and coverage analysis
• config-audit - Audit Claude Code Configuration Artifacts

  claude-codeconfig-audittoken-optimizationstatic-analysis

  ★ 0 · Updated 2026-09-17

  Audits Claude Code hooks, skills, CLAUDE.md, and agents for over-engineering, redundancy, and token waste using model routing.

  ⚙ Discover configuration artifacts⚙ Fetch official documentation⚙ Analyze artifact configuration patterns
• firewall-review - Vendor-agnostic firewall ruleset audit playbook

  firewall-auditstatic-analysiscompliancenetwork-security

  ★ 3 · Updated 2026-09-17

  Performs static analysis on multi-vendor firewall configs using 17 detectors and compliance frameworks to generate audit reports and remediation trackers.

  ⚙ Sniff vendor configuration files⚙ Parse multi-vendor firewall rules⚙ Run 17 rule quality detectors
• lint - Multi-language intelligent linting and automatic fixing

  lintcode-qualityauto-fixmulti-language

  ★ 0 · Updated 2026-09-17

  Detects project languages and runs linters or fixes code issues using Makefile or language toolchains.

  ⚙ Detect project languages and build systems⚙ Execute Makefile lint targets⚙ Run Go project-linter workflow

Scroll to load more