Static Analysis Tools Skill | babysitter | ClaudePluginHub

Skill

Community

Static Analysis Tools Skill

From babysitter

411

Description

Integration with security-focused static analysis tools

AI Summary

Executes security-focused static analysis tools to detect vulnerabilities and generate custom detection rules.

Install

1

Run in your terminal

$

npx claudepluginhub a5c-ai/babysitter

Tool Access

This skill is limited to using the following tools:

BashReadWriteEditGlobGrep

Supporting Assets

View in Repository

README.md

Skill Content

Static Analysis Tools Skill

Overview

This skill provides integration with security-focused static analysis tools for comprehensive code security analysis.

Capabilities

Execute Semgrep rules and custom patterns
Run CodeQL queries for vulnerability detection
Execute Bandit (Python), Brakeman (Ruby), etc.
Parse and interpret static analysis results
Generate custom detection rules
Aggregate findings across tools
Map findings to CWE/CVE identifiers
Support SAST pipeline integration

Target Processes

static-code-analysis.js
variant-analysis.js
web-app-vuln-research.js
api-security-research.js

Dependencies

Semgrep CLI
CodeQL CLI and databases
Language-specific analyzers:
- Bandit (Python)
- Brakeman (Ruby)
- gosec (Go)
- SpotBugs (Java)
Python for result aggregation

Usage Context

This skill is essential for:

Security code review automation
Vulnerability pattern detection
Custom security rule development
CI/CD security gate integration
Variant analysis across codebases

Integration Notes

Supports multiple output formats (SARIF, JSON, custom)
Can run incrementally on changed files
Integrates with IDE and CI/CD workflows
Custom rules can be version controlled
Results can be deduplicated and triaged

Links

GitHub Stats

21 forks

Updated 1 month ago

Actions

Similar Skills

Activates when the user asks about AI prompts, needs prompt templates, wants to search for prompts, or mentions prompts.chat. Use for discovering, retrieving, and improving prompts.

151.0k

Search, retrieve, and install Agent Skills from the prompts.chat registry using MCP tools. Use when the user asks to find skills, browse skill catalogs, install a skill for Claude, or extend Claude's capabilities with reusable AI agent components.

151.0k

Hook Development

This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentions hook events (PreToolUse, PostToolUse, Stop, SubagentStop, SessionStart, SessionEnd, UserPromptSubmit, PreCompact, Notification). Provides comprehensive guidance for creating and implementing Claude Code plugin hooks with focus on advanced prompt-based hooks API.

75.3k