skills.rest
Eviden0
Eviden0COMMUNITY
Explore all skills by this author →
WebsiteGitHub

irify-sast

Compile source code into SSA IR and trace data flow with SyntaxFlow to detect vulnerabilities.

Updated Aug 23, 2026
Search Tags:#security testing#vulnerability detection#source code analysis#static code analysis#SSA IR
One-click install
npx skills add https://github.com/Eviden0/GeneralConfig --skill irify-sast
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: irify-sast
Source: https://github.com/Eviden0/GeneralConfig/tree/main/skills/irify-sast
Command: npx skills add https://github.com/Eviden0/GeneralConfig --skill irify-sast

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires yaklang, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of static application security testing (SAST), allowing for efficient detection of vulnerabilities in source code without executing the application.

Core Features & Use Cases

  • Source Code Compilation: Converts source code into Static Single Assignment (SSA) Intermediate Representation (IR) for comprehensive analysis.
  • Vulnerability Detection: Identifies vulnerabilities like SQL injection, remote code execution, and XML external entities across multiple programming languages.
  • Incremental Compilation: Supports incremental compilation for efficient updates in projects with changing code.
  • Use Case: Use this Skill to automatically scan a Java project for potential SQL injection vulnerabilities, saving time and reducing manual effort.

Quick Start

Run the irify-sast skill on your project source code to automatically detect vulnerabilities.

Frequently Asked Questions about irify-sast

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate static application security testing for source code?▼

Static application security testing is automated by compiling source code into SSA Intermediate Representation and using SyntaxFlow to trace data flow, detecting vulnerabilities like SQL injection and remote code execution without executing the application.

Can I detect SQL injection and remote code execution using static code analysis?▼

Static code analysis detects vulnerabilities like SQL injection, remote code execution, and XML external entities by compiling source code into SSA IR and tracing data flow across multiple supported programming languages.

Do I need a yaklang MCP server to run SSA IR compilation for vulnerability detection?▼

Vulnerability detection via SSA IR compilation requires the yaklang MCP server and associated tools to execute IR compilation and perform SyntaxFlow data flow query operations.

What is the best way to handle source code analysis for projects with frequently changing code?▼

Source code analysis for changing projects is handled efficiently through incremental compilation, which updates the SSA Intermediate Representation to support fast vulnerability detection without reprocessing the entire codebase.

How does SSA Intermediate Representation work for vulnerability detection in source code?▼

SSA Intermediate Representation works for vulnerability detection by converting source code into a static single assignment form, enabling SyntaxFlow to accurately trace data flow and identify security flaws.

Does static code analysis support multiple programming languages for security testing?▼

Static code analysis supports multiple programming languages for security testing by compiling various source code inputs into a unified SSA Intermediate Representation for consistent data flow tracing.

Related Skills

Explore More Software Engineering Skills→
Bitterbot-AIBitterbot-AI
2.5k

mcporter

List, configure, authenticate, and call MCP servers and tools via CLI.

Official
Intermediate
webrix-aiwebrix-ai
1

vulnerability-prioritization

Correlate CVE scan results with infrastructure to prioritize patching and create Jira tickets.

Official
Advanced
whtoowhtoo
34

compiler-dev

Automate compiler backend tasks for IR, CFG, SSA, and optimization passes.

Community
Advanced
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced