concurrency-checker

What problem does it solve?

Concurrency bugs such as race conditions, deadlocks, and TOCTOU flaws are nondeterministic, often evade standard testing, and can cause severe production outages, data corruption, or security breaches. This skill automates the detection of these critical issues across 7 programming languages, eliminating the need for manual, error-prone concurrency reviews and reducing the risk of undetected flaws reaching production.

Core Features & Use Cases

• Static Pattern Scanning: Identifies common concurrency anti-patterns like lock-across-await, broken double-checked locking, and sleep-based synchronization without requiring runtime instrumentation.
• Dynamic Race Detector Integration: Invokes language-native tools (Go -race, ThreadSanitizer, Java JFR, etc.) for ambiguous shared-state issues that cannot be resolved via static analysis alone.
• Cross-Language Coverage: Supports C, C++, Java, Python, C#, JavaScript/TypeScript, Go, and SQL, with language-specific safe/unsafe code pattern examples and OWASP/CWE mapping for all findings.
• Use Case: For a fintech application handling concurrent financial transactions, this skill catches data races on balance updates and TOCTOU flaws on authorization checks before they can cause financial loss or security incidents.

Quick Start

Use the concurrency-checker skill to scan your project's codebase for concurrency bugs, and receive a prioritized report of findings with clear fix recommendations and OWASP/CWE alignment.