AI Agent Skills

A powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices—helping developers and AI write more reliable…

Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等

Static Value-Flow Analysis Framework for Source Code

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with…

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework ca…

Vulnerability Static Analysis for Containers

A static analysis security vulnerability scanner for Ruby on Rails applications

Static analysis for GitHub Actions

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

An easy-to-learn/use static analysis framework for Java and Android

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

EMBA - The firmware security analyzer

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts.…