Packs
2 packs@trailofbits
Static Analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
3 skills · pack
curated
Quarkus Release Pipeline
Install this pack to run build, static analysis, security scan, and diff review before a Quarkus release.
3 skills · pack
Results for “static-analysis”
16 skills
dotnet detect-static-dependencies
Scan C# source files for hard-to-test static dependencies and produce a ranked report of static call sites by frequency.
4k
trailofbits sarif-parsing
Parse, analyze, and process SARIF files from static analysis tools like CodeQL and Semgrep, including filtering, deduplication, aggregation, and CI/CD integration.
6k · bundle
trailofbits audit-augmentation
Projects external audit findings from SARIF static analysis results and weAudit annotation files onto Trailmark code graphs as annotations and subgraphs, enabling cross-referencing with pre-analysis data like blast radius and taint.
6k · bundle
trailofbits semgrep
Run Semgrep static analysis scans with automatic language detection, parallel subagent execution, and merged SARIF output. Supports full ruleset coverage or high-confidence security vulnerability filtering.
6k · bundle
trailofbits audit-prep-assistant
Prepares codebases for security review using Trail of Bits' checklist by setting review goals, running static analysis, increasing test coverage, removing dead code, and generating documentation.
6k · bundle
github codeql
Configure and run CodeQL code scanning through GitHub Actions workflows or the standalone CLI for security analysis.
36.2k · bundle
More results
trailofbits semgrep-rule-variant-creator
Ports existing Semgrep rules to new target languages with applicability analysis and test-driven validation.
6k · bundle
trailofbits trailmark-structural
Runs full Trailmark structural analysis by building a graph and computing pre-analysis passes for hotspots, taint, blast radius, privilege boundaries, and attack surface.
6k · bundle
getsentry skill-scanner
Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
845 · bundle
trailofbits constant-time-analysis
Analyzes cryptographic code to detect operations that leak secret data through execution timing variations, supporting multiple languages.
6k · bundle
trailofbits semgrep-rule-creator
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns with proper testing and validation.
6k · bundle
trailofbits codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis, with support for multiple languages, scan modes, and data extension models.
6k · bundle
trailofbits trailmark
Builds and queries multi-language source code graphs for security analysis, including blast radius, taint propagation, privilege boundaries, and entry point enumeration.
6k · bundle
trailofbits algorand-vulnerability-scanner
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues.
6k · bundle
dotnet find-untested-sources
Parse source files to find which ones have no test file referencing their declared types, producing a prioritized worklist of untested files.
4k · bundle
trailofbits c-review
Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.
6k · bundle