Best Static analysis and SAST skills, page 2

Run CodeQL database creation and security queries, add data-extension models, or process CodeQL SARIF.

waybarrios/opencode-power-pack

Model a method's taint propagation as code-based dataflow approximation and refine it against a test project until the sample passes.

seqra/opentaint

A skill your agent uses when writing or reviewing AI agent configs, system prompts, or tool definitions (JSON/YAML/Python) and you need to catch ambiguous tool descriptions, missing stop conditions…

hermes-labs-ai/lintlang

Evidence-based security report generation for firmware assessments.

OrbitCurve/firmware-reverse-engineering

Diagnose and fix Session Sniffer bugs, errors, tracebacks, logs, lint failures, static-analysis findings, test failures, and IDE-reported problems.

BUZZARDGTA/Session-Sniffer

Creates language variants of existing Semgrep rules. An agent skill from trailofbits/skills.

trailofbits/skills

Run Semgrep static analysis across a codebase, optionally using Semgrep Pro for cross-file taint analysis.

waybarrios/opencode-power-pack

Interactive smart contract security audit using Map-Hunt-Attack methodology with static analysis, parallel hunt lanes, skeptic-judge verification, and structured reporting.

Archethect/sc-auditor

Statically audits GitHub Actions workflows that run AI coding agents, tracing attacker-controlled input to agent prompts and flagging unsafe sandbox, trigger and allowlist settings.

trailofbits/skills

Run multi-dimensional quality assurance for InstructorPHP. An agent skill from cognesy/instructor-php.

cognesy/instructor-php

Enriches an existing CycloneDX BOM with occurrence, callstack, reachability, data-flow, and crypto-flow evidence using cdxgen evinse, including Go analysis via Golem and Rust analysis via Rusi, and…

cdxgen/cdxgen

Run one stage of the OpenTaint pipeline by coordinating leaf subagents and deterministic joins.

seqra/opentaint

Lint AI agent instruction files (SKILL.md, CLAUDE.md, AGENTS.md, GEMINI.md), tool definitions, system prompts, and agent configs with the deterministic LintLang CLI.

hermes-labs-ai/lintlang

A skill your agent uses when fixing compiler warnings, static analyzer findings (clang-tidy, etc.), or runtime errors/crashes in the libYSE codebase.

yvanvds/yse-soundengine

Run Semgrep static analysis scans and create custom detection rules.

semgrep/skills

Pre-release readiness check for the voxglitch plugin, run before submitting a version to the VCV Rack library.

clone45/voxglitch

Perform codebase analysis and architecture mapping as the first phase of a security assessment.

utkusen/sast-skills

Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.

s0ld13rr/pentestcode

Systematic static analysis of ELF firmware binaries using command-line tools (file, strings, readelf, objdump, xxd).

OrbitCurve/firmware-reverse-engineering

Finds sensitive data that C, C++ or Rust code never wipes from memory, including wipes the compiler optimizes away, using source, assembly and control-flow analysis.

trailofbits/skills

Manage OpenClaw GitHub Actions and Blacksmith CI capacity, runner-registration budgets, fanout caps, main-push single-flight, shard sizing, hosted-runner offload, queue health, and safe…

openclaw/openclaw

Guide to running, reading and fixing code style and analysis violations in grails-core with CodeNarc, Checkstyle, PMD, SpotBugs, Spotless and JaCoCo through Gradle.

apache/grails-core

Audit a named AI agent config, system prompt, tool-definition or instruction file (YAML, JSON, Markdown, text, or Python) with the released LintLang CLI, on request.

hermes-labs-ai/lintlang

Research notes drawn from Trail of Bits, SlowMist, ConsenSys, Immunefi and Cyfrin on smart contract audit methodology, with Slither, Echidna and Medusa setup.

tradecatlabs/vibe-coding-cn

C++ naming, formatting, static analysis, and RTTI rules for LuisaCompute.

LuisaGroup/LuisaCompute

Master ShellCheck static analysis configuration and usage for shell script quality. Use when setting up linting infrastructure, fixing code issues…

wshobson/agents

Detect GraphQL injection vulnerabilities in a codebase using a three-phase approach: recon (confirm GraphQL usage and find unsafe operation document assembly sites), batched verify (trace user input…

utkusen/sast-skills

Static safety audit of a SKILL.md that scores five dimensions and acts as a gate: skills below the pass line do not ship, whatever else they score.

openJiuwen-ai/agent-core

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.

trailofbits/skills

The Massing release discipline — how to ship a verified, CI-green version-numbered release direct to main.

ibuilder/massing

分析 Code Scanning (CodeQL) 告警，评估安全风险并创建修复任务。当用户要求分析 Code Scanning 告警、CodeQL 告警时触发。参数为告警编号。

ModelEngine-Group/fit-framework

Scans a Power Pages site project for security issues in source code and dependencies.

microsoft/power-platform-skills

Run an end-to-end OpenTaint application-security analysis while owning the long project build and scans and delegating each other pipeline stage.

seqra/opentaint

Run convex-doctor static analysis, interpret findings, and fix issues across security, performance, correctness, schema, and architecture categories.

waynesutton/markdown-site

Run a Codex-CLI static-analysis parity review of the current diff against the local RPython/PyPy sources, then act on it — fix the regressions and new mismatches in-session, and file the rest as…

youknowone/pyre

Audit a named AI agent config, system prompt, tool definition, or instruction file (YAML, JSON, Markdown, text, or Python) with the released LintLang CLI in GitHub Copilot CLI.

hermes-labs-ai/lintlang

Runs linting and static analysis on PHP/CSS/JS using phpcs, phpstan, and rector.

bonny/WordPress-Simple-History

A skill your agent uses when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security.

AratKruglik/claude-laravel

Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project…

PlamenTSV/plamen

Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find candidates), batched verify (check authorization in parallel subagents, 3…

utkusen/sast-skills

Run the full Spring Boot verification loop — Maven or Gradle build, SpotBugs, PMD, and Checkstyle static analysis, unit and Testcontainers integration tests with JaCoCo coverage, OWASP dependency…

affaan-m/ECC

关闭 Code Scanning (CodeQL) 告警，需提供合理理由。当用户要求关闭 Code Scanning 告警、dismiss CodeQL 告警时触发。参数为告警编号。

ModelEngine-Group/fit-framework

Reduce technical debt and improve code quality by systematically resolving static analysis warnings.

flutter/flutter-intellij

When and how to reach for the companion detectors -- bandit (Python SAST) and trivy (deps + secrets + IaC misconfig) -- alongside the core semgrep/CodeQL/osv/trufflehog toolchain

deonmenezes/mantishack

Build a target project into an opentaint project model. An agent skill from seqra/opentaint.

seqra/opentaint

Generate a complete Semgrep rule bundle (rule.yml + tests.md + README.md) from a CVE description and a bad-code example.

skrun-dev/skrun

Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.

affaan-m/ECC

A skill your agent uses for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.

zhaoxuya520/reverse-skill