1
Static Value-Flow Analysis Framework for Source Code
$ npx skills add SVF-tools/SVF1.7K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
c++static-analysis
by SVF-toolsQuick view
Decision filters
Choose skills by scenario, quality, and trust signals.
52 skills matching "static-analysis"
Best blend of quality, stars, freshness, and agent usage
2
Interactive architecture diagrams for codebases
$ npx skills add CodeBoarding/CodeBoarding1.7K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
pythonstatic-analysis
by CodeBoardingQuick view
3
Node.js dependency tracing utility
$ npx skills add vercel/nft1.6K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javascriptstatic-analysis
by vercelQuick view
4
Next-gen phpDoc parser with support for intersection types and generics
$ npx skills add phpstan/phpdoc-parser1.5K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
phpstatic-analysis
by phpstanQuick view
5
PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.
$ npx skills add PHPCSStandards/PHP_CodeSniffer1.5K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
phpstatic-analysis
by PHPCSStandardsQuick view
6
Security risk analysis for Kubernetes resources
$ npx skills add controlplaneio/kubesec1.5K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
gostatic-analysis
by controlplaneioQuick view
7
Radare2 and Frida better together.
$ npx skills add nowsecure/r2frida1.4K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
typescriptstatic-analysis
by nowsecureQuick view
8
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
$ npx skills add ZupIT/horusec1.3K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
gostatic-analysis
by ZupITQuick view
9
Docker image that provides static analysis tools for PHP
$ npx skills add jakzal/phpqa1.3K stars64 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
dockerfilestatic-analysis
by jakzalQuick view
10
An analysis tool for Python that blurs the line between testing and type systems.
$ npx skills add pschanely/CrossHair1.3K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
pythonstatic-analysis
by pschanelyQuick view
11
SonarSource Static Analyzer for JavaScript and TypeScript
$ npx skills add SonarSource/SonarJS1.2K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
typescriptstatic-analysis
by SonarSourceQuick view
12
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
$ npx skills add SonarSource/sonar-java1.2K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javastatic-analysis
by SonarSourceQuick view
13
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
$ npx skills add semgrep/semgrep-rules1.2K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
hclstatic-analysis
by semgrepQuick view
14
A powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices—helping developers and AI write more reliable code.
$ npx skills add meziantou/Meziantou.Analyzer1.1K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
c#static-analysis
by meziantouQuick view
15
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
$ npx skills add XmirrorSecurity/OpenSCA-cli1.1K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
gostatic-analysis
by XmirrorSecurityQuick view
16
An artifact of fully-specified annotations to power static-analysis checks, beginning with nullness analysis.
$ npx skills add jspecify/jspecify1.1K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javastatic-analysis
by jspecifyQuick view
17
Python Type Checker / Language Server
$ npx skills add zubanls/zuban1.1K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
ruststatic-analysis
by zubanlsQuick view
18
Protect against malicious open source packages 🤖
$ npx skills add safedep/vet1.1K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
gostatic-analysis
by safedepQuick view
19
A LLVM-based static analysis framework.
$ npx skills add secure-software-engineering/phasar1.0K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
c++static-analysis
by secure-software-engineeringQuick view
20
An Intelligent Python Code Quality Analyzer
$ npx skills add ludo-technologies/pyscn1.0K stars63 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
gostatic-analysis
by ludo-technologiesQuick view
21
An easy-to-learn/use static analysis framework for Java
$ npx skills add pascal-lab/Tai-e1.8K stars61 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javastatic-analysis
by pascal-labQuick view
22
Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.
$ npx skills add bytedance/appshark1.7K stars61 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
kotlinstatic-analysis
by bytedanceQuick view
23
PySonar2: a semantic indexer for Python with interprocedual type inference
$ npx skills add yinwang0/pysonar21.4K stars61 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javastatic-analysis
by yinwang0Quick view
24
A reactive Python kernel for Jupyter notebooks.
$ npx skills add ipyflow/ipyflow1.3K stars60 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
pythonstatic-analysis
by ipyflowQuick view
25
✔️ PHP Architecture Tester - Easy architecture testing for PHP
$ npx skills add carlosas/phpat1.3K stars60 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
phpstatic-analysis
by carlosasQuick view
26
FlowDroid Static Data Flow Tracker
$ npx skills add secure-software-engineering/FlowDroid1.2K stars60 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javastatic-analysis
by secure-software-engineeringQuick view
27
Sonar Dotnet
STRONG · 76Code analyzer for C# and VB.NET projects
$ npx skills add SonarSource/sonar-dotnet905 stars54 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
c#static-analysis
by SonarSourceQuick view
28
JET.Jl
EXCELLENT · 87A code analyzer for Julia. No need for additional type annotations.
$ npx skills add aviatesk/JET.jl863 stars54 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
juliastatic-analysis
by aviateskQuick view
29
Skott
EXCELLENT · 87All-in-one devtool to automatically analyze, search and visualize project modules and dependencies from JavaScript, TypeScript (JSX/TSX) and Node.js (ES6, CommonJS)
$ npx skills add antoine-coulon/skott857 stars54 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
typescriptstatic-analysis
by antoine-coulonQuick view
30
WALA
EXCELLENT · 87T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.
$ npx skills add wala/WALA851 stars54 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javastatic-analysis
by walaQuick view
31
Rubocop Rspec
STRONG · 81Code style checking for RSpec files.
$ npx skills add rubocop/rubocop-rspec845 stars54 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
rubystatic-analysis
by rubocopQuick view
32
SootUp
EXCELLENT · 86A new version of Soot with a completely overhauled architecture
$ npx skills add soot-oss/SootUp787 stars54 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
javastatic-analysis
by soot-ossQuick view
33
Phpstan Symfony
STRONG · 80Symfony extension for PHPStan
$ npx skills add phpstan/phpstan-symfony787 stars54 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
phpstatic-analysis
by phpstanQuick view
34
Phpstan Strict Rules
STRONG · 80Extra strict and opinionated rules for PHPStan
$ npx skills add phpstan/phpstan-strict-rules696 stars54 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
phpstatic-analysis
by phpstanQuick view
35
Cake
STRONG · 75Cake a C23 front end and transpiler written in C
$ npx skills add thradams/cake676 stars54 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
cstatic-analysis
by thradamsQuick view
36
Phpstan Doctrine
STRONG · 80Doctrine extensions for PHPStan
$ npx skills add phpstan/phpstan-doctrine667 stars53 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
phpstatic-analysis
by phpstanQuick view
37
Sonarlint Intellij
EXCELLENT · 85SonarQube plugin for JetBrains IDEs providing code quality and security feedback directly in the IDE
$ npx skills add SonarSource/sonarlint-intellij635 stars53 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
kotlinstatic-analysis
by SonarSourceQuick view
38
Pep8speaks
EXCELLENT · 85A GitHub :octocat: app to automatically review Python code style over Pull Requests
$ npx skills add pep8speaks-org/pep8speaks619 stars53 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
pythonstatic-analysis
by pep8speaks-orgQuick view
39
Sonarlint Vscode
EXCELLENT · 85SonarQube extension for Visual Studio Code providing code quality and security feedback directly in the editor
$ npx skills add SonarSource/sonarlint-vscode616 stars53 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
cssstatic-analysis
by SonarSourceQuick view
40
CodeCompass
EXCELLENT · 85CodeCompass is a software comprehension tool for large scale software written in C/C++, C# and Python.
$ npx skills add Ericsson/CodeCompass601 stars53 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
c++static-analysis
by EricssonQuick view
41
BackwardCompatibilityCheck
EXCELLENT · 85:ab: Tool to compare two revisions of a class API to check for BC breaks
$ npx skills add Roave/BackwardCompatibilityCheck596 stars53 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
phpstatic-analysis
by RoaveQuick view
42
Gitleaks Action
STRONG · 74Protect your secrets using Gitleaks-Action
$ npx skills add gitleaks/gitleaks-action586 stars53 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
javascriptstatic-analysis
by gitleaksQuick view
43
Astroid
EXCELLENT · 85A common base representation of python source code for pylint and other projects
$ npx skills add pylint-dev/astroid576 stars53 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
pythonstatic-analysis
by pylint-devQuick view
44
Generate interactive call graphs for various languages
$ npx skills add chanhx/crabviz1.4K stars53 qualityClaude Code
High-confidence pick with strong adoption and healthy maintenance signals.
typescriptstatic-analysis
by chanhxQuick view
45
Tai-e assignments for static program analysis
$ npx skills add pascal-lab/Tai-e-assignments1.2K stars52 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
javastatic-analysis
by pascal-labQuick view
46
Security Tools
STRONG · 81My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
$ npx skills add bl4de/security-tools921 stars51 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
pythonstatic-analysis
by bl4deQuick view
47
Semgrep Rules
STRONG · 80A collection of my Semgrep rules to facilitate vulnerability research.
$ npx skills add 0xdea/semgrep-rules813 stars51 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
cstatic-analysis
by 0xdeaQuick view
48
Mobsfscan
STRONG · 80mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
$ npx skills add MobSF/mobsfscan757 stars51 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
pythonstatic-analysis
by MobSFQuick view
49
Packj
STRONG · 80Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
$ npx skills add ossillate-inc/packj686 stars51 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
pythonstatic-analysis
by ossillate-incQuick view
50
Prealloc
STRONG · 79prealloc is a Go static analysis tool to find slice declarations that could potentially be preallocated.
$ npx skills add alexkohler/prealloc665 stars50 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
gostatic-analysis
by alexkohlerQuick view
51
Phpmnd
STRONG · 73PHP Magic Number Detector
$ npx skills add povils/phpmnd583 stars50 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.
phpstatic-analysis
by povilsQuick view
52
Security-focused static analysis for the Phoenix Framework
$ npx skills add nccgroup/sobelow1.8K stars49 qualityClaude Code
Solid option that is likely worth shortlisting for production workflows.Check: Repository looks stale
elixirstatic-analysis
by nccgroupQuick view