static-analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
- version
- 1.5.1
- GitHub stars
- 8.1K
Install
/plugin install static-analysis@trailofbitsRun it inside Claude Code after adding the marketplace with /plugin marketplace add trailofbits/skills.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageDetails
- Marketplace
- trailofbits/skills
- Source
- plugins/static-analysis
- Author
- Axel Mierczuk & Paweł Płatek
- Category
- Community
More from trailofbits/skills
All 51- supply-chain-risk-auditorv2.0.4
- testing-handbook-skillsv1.2.2
- trailmarkv0.12.2
- variant-analysisv2.0.4
- vulnerability-triage-brocardsv0.1.3
- workflow-skill-designv1.0.1
- writing-lean-proofsv0.1.2
- yara-authoringv2.2.1
- zeroize-auditv0.4.2
- agentic-actions-auditorv1.3.2
- ask-questions-if-underspecifiedv1.0.1
- audit-context-buildingv2.0.2
- building-secure-contractsv1.2.2
- burpsuite-project-parserv1.1.2
- c-reviewv2.0.4
- chrome-mcp-troubleshootingv1.1.5
- claude-in-chrome-troubleshootingv1.0.0
- code-improverv1.0.3
- constant-time-analysisv0.2.6
- culture-indexv1.1.6
- cvss-scoringv1.2.0
- debug-buttercupv1.0.0
- devcontainer-setupv0.2.5
- differential-reviewv1.1.4