By seqra

Analyze an OpenTaint scan's dropped external methods and decide which of them are propagators and optionally sinks.

seqra/opentaint

Model a method's taint propagation as code-based dataflow approximation and refine it against a test project until the sample passes.

seqra/opentaint

Run one stage of the OpenTaint pipeline by coordinating leaf subagents and deterministic joins.

seqra/opentaint

Run an end-to-end OpenTaint application-security analysis while owning the long project build and scans and delegating each other pipeline stage.

seqra/opentaint

Build a target project into an opentaint project model. An agent skill from seqra/opentaint.

seqra/opentaint

Model a method's taint propagation as a passThrough approximation.

seqra/opentaint

Author and verify an OpenTaint rule. An agent skill from seqra/opentaint.

seqra/opentaint

Create an OpenTaint test project with positive/negative samples for verifying a rule or approximation.

seqra/opentaint

Classify project-used dependency members and record taint sources as rule-authoring units.

seqra/opentaint

Reproduce a true-positive finding against the running application.

seqra/opentaint

Triage OpenTaint findings statically. An agent skill from seqra/opentaint.

seqra/opentaint

Connect the shared untrusted-data source group to new reusable OpenTaint sink groups.

seqra/opentaint

Debug a rule or approximation that behaves unexpectedly by tracing where taint is dropped.

seqra/opentaint

Run an OpenTaint scan on project and produces the SARIF report.

seqra/opentaint

Mark which of a project's dependency libraries could introduce taint sources.

seqra/opentaint

Write a self-contained OpenTaint engine-issue report from an analysis diagnosis or a full-scan failure.

seqra/opentaint