...
npx skills add https://github.com/pruiz/CodeCome --skill c-cpp-security
Please help me install this Agent Skill. Skill: c-cpp-security Source: https://github.com/pruiz/CodeCome/tree/main/.opencode/skills/c-cpp-security Command: npx skills add https://github.com/pruiz/CodeCome --skill c-cpp-security
This Skill helps security researchers and developers identify critical vulnerabilities in C and C++ source code, facilitating faster security assessments.
Use the c/c++ security skill to review your source code for common security vulnerabilities and unsafe functions.
High-intent search queries and answers about installing and using this skill.
To find memory safety vulnerabilities in C or C++ source code, you can perform static analysis to detect high-risk issues like buffer overflows and use-after-free. This approach reviews unsafe patterns, dangerous APIs, and insecure practices to improve overall code security.
The best way to check C++ projects for unsafe functions and insecure string handling is through code pattern review. It identifies dangerous APIs such as strcpy and system calls, helping developers fix input validation and buffer handling issues efficiently.
Yes, you can use static analysis to detect command execution and cryptographic vulnerabilities in C. The process analyzes source files and build scripts to identify dangerous functions, unsafe patterns, and input validation issues across the entire codebase.
Yes, this security analysis automatically identifies memory leaks and use-after-free issues. It generates vulnerability hypotheses by analyzing source code for dangerous APIs and unsafe patterns, facilitating faster security assessments for code auditors.
The limitations of static code analysis for C and C++ security vulnerabilities include focusing primarily on source files and build scripts to identify unsafe patterns and dangerous APIs. It generates vulnerability hypotheses rather than executing the code to confirm runtime memory safety issues.
amano--Queries codebases for security vulnerabilities and bugs using the CodeQL framework.
dahatakeDetect dangerous commands and patterns in code or terminal input.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
RedHatProductSecurityAnalyze cryptographic source code for timing side-channel vulnerabilities.
