skills.rest
syhya
syhyaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

code-analysis

Analyze Python source code for bugs, vulnerabilities, and performance bottlenecks.

19|2|Updated May 14, 2026
Search Tags:#static analysis#code review#owasp#performance profiling#bug hunting#cwe#security scanner
One-click install
npx skills add https://github.com/syhya/mlsys26-flashinfer-contest --skill code-analysis-syhya
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-analysis
Source: https://github.com/syhya/mlsys26-flashinfer-contest/tree/main/full-agent/dsa/agent/.agents/skills/code-analysis
Command: npx skills add https://github.com/syhya/mlsys26-flashinfer-contest --skill code-analysis-syhya

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the identification of bugs, performance bottlenecks, and security vulnerabilities in Python codebases, ensuring high-quality and secure software delivery.

Core Features & Use Cases

  • Static Analysis: Detects logic errors, code complexity, and quality issues across large codebases.
  • Security Scanning: Identifies OWASP Top 10 and CWE vulnerabilities like SQL injection and hardcoded credentials.
  • Performance Profiling: Pinpoints algorithmic inefficiencies and memory-intensive operations.
  • Use Case: Integrate this into your CI/CD pipeline to automatically block pull requests that contain critical security vulnerabilities or performance regressions.

Quick Start

Use the code-analysis skill to run a full security and performance scan on the current directory and generate a report.

Frequently Asked Questions about code-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities and bugs in Python source code?▼

Static analysis identifies security vulnerabilities and bugs in Python source code by parsing abstract syntax trees and matching patterns against CWE and OWASP Top 10 enumerations to pinpoint issues like SQL injection and hardcoded credentials.

Can I integrate automated code review into a CI/CD pipeline to block vulnerable pull requests?▼

Yes, you can integrate automated code review into a CI/CD pipeline to run security scanning and performance profiling, which automatically blocks pull requests that contain critical security vulnerabilities or performance regressions.

How does static analysis detect performance bottlenecks and memory-intensive operations?▼

Static analysis detects performance bottlenecks and memory-intensive operations by evaluating code structure without execution, pinpointing algorithmic inefficiencies and identifying code complexity issues.

Does this code analysis approach work for remediating technical debt across large codebases?▼

Yes, static analysis works for remediating technical debt across large codebases by detecting logic errors, code complexity, and quality issues through pattern matching and security scanning.

What is the best way to scan Python code for OWASP Top 10 and CWE vulnerabilities?▼

The best way to scan Python code for OWASP Top 10 and CWE vulnerabilities is using automated security scanning that applies static analysis to match code patterns against known weakness enumerations.

Related Skills

Explore More Software Engineering Skills→
nickromneynickromney

Setup Security Scanning

Configure security scanning for codebases and CI/CD pipelines.

Community
Advanced
buiminhduc23011buiminhduc23011

awf-audit

Audit software projects for security, performance, and code quality issues.

Community
Advanced
hummbl-devhummbl-dev
2

github-repository-architect

Automate GitHub repository initialization, governance, CI/CD, and documentation setup.

Community
Intermediate
alicangnllalicangnll

OWASP Mobile Top 10

Detect OWASP Mobile Top 10 vulnerabilities in iOS and Android apps.

Community
Advanced