Trace data flows and verify vulnerabilities using Code Property Graphs and CPGQL.
npx skills add https://github.com/allsmog/vuln-scout --skill cpg-analysis
Please help me install this Agent Skill. Skill: cpg-analysis Source: https://github.com/allsmog/vuln-scout/tree/main/whitebox-pentest/skills/cpg-analysis Command: npx skills add https://github.com/allsmog/vuln-scout --skill cpg-analysis
This Skill provides advanced code analysis capabilities by leveraging Code Property Graphs (CPGs) to understand complex data flows and identify vulnerabilities that traditional methods miss.
Use the cpg-analysis skill to find all data flow paths from request parameters to database query calls.
High-intent search queries and answers about installing and using this skill.
A Code Property Graph (CPG) combines AST, CFG, and PDG structures to map execution paths and data dependencies. It improves vulnerability verification by enabling semantic code understanding beyond pattern matching, allowing precise confirmation of security flaws.
To trace user input from source to sink, you query the Code Property Graph using CPGQL. This deep data flow analysis tracks parameters across functions and files, allowing you to confirm if user-controlled input reaches sensitive functions.
Yes, you can use cpg-analysis to detect SQL injection paths. By analyzing data flows from request parameters to database query calls, it verifies if user-controlled input can reach execution sinks, confirming potential vulnerabilities with high confidence.
Yes, Joern supports deep data flow analysis across multiple files. By constructing Code Property Graphs, it traces user input from source to sink across functions and files, enabling precise identification of security flaws through CPGQL queries.
Code Property Graph analysis provides semantic code understanding instead of traditional pattern matching. By analyzing AST, CFG, and PDG together, it identifies actual execution paths and data dependencies, revealing complex vulnerabilities that traditional methods miss.
CPGQL queries require constructing comprehensive Code Property Graphs to understand data dependencies and execution paths. While highly precise for vulnerability verification, limitations arise if the CPG fails to capture all execution paths or incomplete semantic code understanding.
DojoGenesisGenerate token-efficient structural summaries of codebases using AST, call graph, CFG, DFG, and PDG.
rauly-1408Detect security vulnerabilities in source code using CodeQL data flow analysis.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
trailofbitsAnalyze source code for security vulnerabilities using code graphs.
