Static analysis with CodeQL, Semgrep, and SARIF for security scanning.
Terminal is for Claude Code, Codex, Cursor and Copilot.
npx skills add trailofbits/agent-skills --skill static-analysisWorks in Claude Code, Codex, Gemini CLI, Cursor and Copilot. The command picks the right folder for your agent.
Runs static analysis using CodeQL and Semgrep tools, processes SARIF output format, and identifies security vulnerabilities, code quality issues, and bug patterns. Built by Trail of Bits.
Expert guidance for ffuf-based web penetration testing and result analysis.
Best practices for authentication with Better Auth library.
Turn your LLM coding assistant into a fully featured SAST scanner.