skills.rest
macaugh
macaughCOMMUNITY
Explore all skills by this author →
GitHub

Static Vulnerability Analysis

Detects injection, memory safety and authorization flaws in multiple languages.

5|3|Updated Oct 13, 2025
Search Tags:#security#vulnerability#static-analysis#code-review#analyze#Semgrep#Bandit
One-click install
npx skills add https://github.com/macaugh/super-rouge-hunter-skills --skill static-vulnerability-analysis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Static Vulnerability Analysis
Source: https://github.com/macaugh/super-rouge-hunter-skills/tree/main/skills/analysis/static-vuln-analysis
Command: npx skills add https://github.com/macaugh/super-rouge-hunter-skills --skill static-vulnerability-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Static Vulnerability Analysis provides a structured approach to identify security flaws in source code without execution, enabling early detection and remediation.

Core Features & Use Cases

  • Pattern-based analysis: Detects common vulnerability patterns with automated tools like Semgrep, Bandit, and ESLint security plugins.
  • Data-flow and logic review: Combines data-flow analysis with manual review to catch logic flaws, auth bypasses, and misconfigurations.
  • Use Case: Before releasing software, run this skill against the codebase to surface injection, memory safety, and authorization issues in languages such as C, C++, Java, Python, JavaScript, and PHP.

Quick Start

Run a static vulnerability analysis on your codebase to identify security issues before deployment.

Frequently Asked Questions about Static Vulnerability Analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities in source code before deployment?▼

Find security vulnerabilities in source code by running static analysis tools like Semgrep, Bandit, and ESLint security plugins to detect injection, memory safety, and authorization issues before deployment.

What programming languages does static vulnerability analysis support for detecting injection flaws?▼

Static vulnerability analysis supports C, C++, Java, Python, JavaScript, and PHP to detect injection flaws, memory safety issues, and authorization bypasses during pre-deployment security reviews.

Can I use Semgrep and Bandit together for pre-deployment code review?▼

Yes, you can use Semgrep and Bandit together for pre-deployment code review to apply pattern-based detection and data-flow analysis, validating automated findings with manual review checklists.

How does data-flow analysis catch logic flaws and authorization bypasses in code?▼

Data-flow analysis catches logic flaws and authorization bypasses by tracing how data moves through source code, combining automated static analysis with manual review to identify misconfigurations and auth issues.

What is the best way to detect memory safety issues in C and C++ codebases?▼

The best way to detect memory safety issues in C and C++ codebases is running automated static analysis tools alongside manual review checklists to surface vulnerabilities without executing the code.

When do I need static analysis versus manual code review for security checks?▼

You need static analysis to automatically detect common vulnerability patterns like injection and memory safety issues, combined with manual code review to validate findings and catch complex logic flaws and misconfigurations.

Related Skills

Explore More Software Engineering Skills→
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
Dhruvipatel0514Dhruvipatel0514
1

code-auditor

Identify and fix OWASP security vulnerabilities in source code repositories.

Community
Intermediate
thisisqubikathisisqubika

security-review

Analyze code repositories for vulnerabilities using SAST and AI triage.

Official
Advanced
kaustubhhiwarekaustubhhiware

security-reviewer

Audit code and cloud configurations for security vulnerabilities.

Community
Advanced