memory-safety-checker

What problem does it solve?

Memory safety bugs including buffer overflows, use-after-free, double-free, and unbounded memory leaks are the root cause of 70% of serious security CVEs and frequent production outages, but are often missed until they cause critical damage. This Skill automates detection of these bugs across 7 common programming languages, eliminating manual review overhead and catching issues before they reach production.

Core Features & Use Cases

• Multi-language memory bug detection: Scans C, C++, Rust, C#, Java, Python, and JS/TS for buffer overflows, use-after-free, double-free, dangling pointers, uninitialized reads, integer overflow-triggered memory errors, TOCTOU race conditions, and FFI boundary violations.
• Integrated tooling support: Works with industry-standard sanitizers (AddressSanitizer, MemorySanitizer, ThreadSanitizer, UndefinedBehaviorSanitizer), static analyzers (clang-tidy, cppcheck, Semgrep), and heap profiling tools for both native and managed runtimes.
• Use case: A team maintaining a C++ microservice can use this Skill to run ASan in CI, identify a use-after-free bug in their decoder module, and get a RAII-based fix before deployment, preventing a potential remote code execution vulnerability.

Quick Start

Use the memory-safety-checker skill to scan your project's codebase for memory safety vulnerabilities, review prioritized findings with exploitability ratings, and implement the suggested fixes for any critical or high-severity issues.