← Browse
static-analysis
trailofbits ★ 7875
A comprehensive static analysis toolkit with three skills for security vulnerability detection: CodeQL for deep taint-tracking analysis, Semgrep for fast pattern-based scanning, and SARIF parsing for aggregating results from multiple tools. The plugin includes workflows for end-to-end Semgrep scans and CodeQL database builds with quality gates, plus scripts for ruleset management and result merging.
Install
> /plugin marketplace add trailofbits/skills/tree/HEAD/plugins/static-analysis
> /plugin install static-analysis
Source: https://github.com/trailofbits/skills/tree/HEAD/plugins/static-analysis
What it's made of
3 skills
- Commands
- 0
- Agents
- 0
- Skills
- 3
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (trailofbits).