Packs
2 packs@trailofbits
Static Analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
3 skills · pack
curated
Quarkus Release Pipeline
Install this pack to run build, static analysis, security scan, and diff review before a Quarkus release.
3 skills · pack
Results for “static-analysis”
14 skillsmalware-analysis
Analyze suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior detection.
12.8k · bundle
stata-lint
Run static analysis on a Stata .do or .ado file and report style and best-practice issues.
1k · bundle
skill-scanner
Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
845 · bundle
More results
stata-graph
List, export, and review Stata graphs from the current session.
1k · bundle
transaction-consistency
Use with analysis-agent or task-agent for task-local transaction, isolation, and conflict decisions. Do not use without a transaction decision or as task owner.
4 · bundle
statistical-analysis
Guides statistical hypothesis testing with assumption checks, effect sizes, power analysis, Bayesian alternatives, and APA-formatted reporting for research data.
30.2k · bundle
stata-log
Tail, read, or search a Stata log file from a previous command or background task.
1k · bundle
geopandas
Extends pandas for geospatial vector data analysis, including reading/writing shapefiles, GeoJSON, GeoPackage, and PostGIS, performing spatial joins, geometric operations, coordinate transformations, and creating static or interactive maps.
30.2k · bundle
stata-inspect
Describe and summarize the current dataset in memory. Optionally inspect a specific variable with codebook.
1k · bundle
status
Show a provider-neutral, freshness-aware snapshot of active Agent work, Git delivery, execution identity, and usage limits. Use for “what's going on right now”, what is running, progress updates, active runtime/provider/model, or stuck-work checks.
8 · bundle
state-machine-modeling
`analysis-agent`/`task-agent`/`review-agent`: use when lifecycle states, transitions, guards, or terminal states need modeling; skip when no state-machine decision exists.
4 · bundle
qa-automation-agent
Use this skill for test strategy, E2E automation, visual regression, flaky test control, QA evidence. Trigger when the task involves agent profile work related to Qa Automation Agent, implementation, audits, debugging, strategy, or validation.
1 · bundle
code-reviewer
Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with 2024/2025 best practices. Use PROACTIVELY for code quality assurance.
505 · bundle
skill-security-auditor
Scan and audit AI agent skills for security risks before installation, producing a PASS/WARN/FAIL verdict with findings and remediation guidance.
20.4k · bundle