static-analysis

by trailofbits6.8kVendor

Engineering

CodeQL, Semgrep, SARIF parsing toolkit

Key details

Creator

trailofbits

Collection

Engineering

Trust tier

Major vendor

GitHub stars

★ 6.8k

Last updated

1mo ago

Compatible with

Claude Code

Part of toolkits

Security Audit Pack

Install

Run in your terminal

npx degit trailofbits/skills/plugins/static-analysis ~/.claude/skills/static-analysis

Clones into ~/.claude/skills/ — Claude Code auto-discovers it (run /skills to confirm; restart if the folder is new).

Works with Claude Code.

Download ZIP

No terminal? Download the folder, then either unzip it into ~/.claude/skills/ or drop the ZIP into Claude Code (or any agent) and ask it to install the skill.

Open repository

What are skills?Browse all

Related skills

webapp-testing

Tests local webapps with Playwright + screenshots

skill-creator

Creates/edits/evaluates skills

web-artifacts-builder

React + Tailwind + shadcn artifacts

mcp-builder

Guides creation of MCP servers (Python/TS)

Related MCPs

View all

Semgrep MCP

Run Semgrep SAST scans, query findings, and manage rulesets and policies.