S Skillteca
Receber por email
Explorar Categorias Coleções Newsletter
← Voltar para o catálogo

Static Analysis Tools Skill

Automação Autor: a5c-ai

Integration with security-focused static analysis tools

1.4kestrelas
Atualizado há 4 meses
Ver no GitHub ↗ Licença: MIT

Como adicionar

/plugin marketplace add a5c-ai/babysitter

O comando exato pode variar conforme o repositório. Confira o README no GitHub.

Para o autor da skill

Cole no README do seu repo

Mostra que sua skill está catalogada na Skillteca, gera backlink e tráfego rastreável.

[![Skillteca](https://www.skillteca.com.br/api/badge/static-analysis-tools-skill/svg)](https://www.skillteca.com.br/skills/static-analysis-tools-skill)

Skills relacionadas

Ver todas de Automação →

MoneyPrinterTurbo

90.3k

利用AI大模型，一键生成高清短视频 Generate short videos with one click using AI LLM.

Automação por harry0703

weather-svg-creator

58.4k

Creates an SVG weather card showing the current temperature for Dubai. Writes the SVG to orchestration-workflow/weather.svg and updates orchestration-workflow/output.md.

Automação #ai por shanraisshan

asana-automation

41.2k

Automate Asana tasks via Rube MCP (Composio): tasks, projects, sections, teams, workspaces. Always search tools first for current schemas.

Automação #git #github por sickn33

payment-integration

41.2k

Integrate Stripe, PayPal, and payment processors. Handles checkout flows, subscriptions, webhooks, and PCI compliance. Use PROACTIVELY when implementing payments, billing, or subscription features.

Automação #git #github por sickn33

Alerta por categoria

Receba novas skills de Automação toda segunda

1 email curto, só com as skills novas de Automação. 4 minutos de leitura, sem spam, cancela com 1 clique.

Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.

Ler descrição completa

Static Analysis Tools Skill

Overview

This skill provides integration with security-focused static analysis tools for comprehensive code security analysis.

Capabilities

  • Execute Semgrep rules and custom patterns
  • Run CodeQL queries for vulnerability detection
  • Execute Bandit (Python), Brakeman (Ruby), etc.
  • Parse and interpret static analysis results
  • Generate custom detection rules
  • Aggregate findings across tools
  • Map findings to CWE/CVE identifiers
  • Support SAST pipeline integration

Target Processes

  • static-code-analysis.js
  • variant-analysis.js
  • web-app-vuln-research.js
  • api-security-research.js

Dependencies

  • Semgrep CLI
  • CodeQL CLI and databases
  • Language-specific analyzers:
  • Bandit (Python)
  • Brakeman (Ruby)
  • gosec (Go)
  • SpotBugs (Java)
  • Python for result aggregation

Usage Context

This skill is essential for:

  • Security code review automation
  • Vulnerability pattern detection
  • Custom security rule development
  • CI/CD security gate integration
  • Variant analysis across codebases

Integration Notes

  • Supports multiple output formats (SARIF, JSON, custom)
  • Can run incrementally on changed files
  • Integrates with IDE and CI/CD workflows
  • Custom rules can be version controlled
  • Results can be deduplicated and triaged
Compartilhar X LinkedIn