SkillMD SkillMD
light-dark-mode
Profile My skills Saved Collections Edit profile Submit a skill

← all plugins

Static Analysis

by @trailofbits · plugin · 3 skills

Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection

Install the whole plugin (CLI)
npx skillmds add trailofbits/codeql npx skillmds add trailofbits/semgrep npx skillmds add trailofbits/sarif-parsing
⬇ Download

Skills in this plugin

  1. ▌
    codeql · trailofbits bundle
    Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis, with support for multiple languages, scan modes, and data extension models.
    6k
    repo stars
  2. ▌
    semgrep · trailofbits bundle
    Run Semgrep static analysis scans with automatic language detection, parallel subagent execution, and merged SARIF output. Supports full ruleset coverage or high-confidence security vulnerability filtering.
    6k
    repo stars
  3. ▌
    sarif-parsing · trailofbits bundle
    Parse, analyze, and process SARIF files from static analysis tools like CodeQL and Semgrep, including filtering, deduplication, aggregation, and CI/CD integration.
    6k
    repo stars