skills.rest
trungtnm
trungtnmCOMMUNITY
Explore all skills by this author →
GitHub

ubs

Detect bug patterns in multi-language code before commits via static analysis.

1|Updated Feb 3, 2026
Search Tags:#python#javascript#pre-commit#static-analysis#ci-cd#multilang#bug-scanner
One-click install
npx skills add https://github.com/trungtnm/claude-code-utils --skill ubs-trungtnm
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ubs
Source: https://github.com/trungtnm/claude-code-utils/tree/main/plugins/skills/ubs
Command: npx skills add https://github.com/trungtnm/claude-code-utils --skill ubs-trungtnm

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

UBS provides static analysis for AI-driven coding workflows, acting as a quality gate to prevent bugs from reaching production by catching a broad set of issues before commits.

Core Features & Use Cases

  • 18 detection categories across JavaScript/TypeScript, Python, Go, Rust, Java, C++, Ruby, Swift
  • 4-layer analysis engine with deterministic results
  • CI/CD and pre-commit integration, with hooks supports Claude Code and other agents
  • Outputs in human-readable text, JSON, or SARIF for code scanning dashboards
  • Clear remediation guidance and suggested fixes for common findings

Quick Start

Run UBS on the changed files to perform a fast, deterministic static analysis before committing.

Frequently Asked Questions about ubs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run static analysis on multiple languages before committing code?▼

You can run static analysis on multiple languages before committing by integrating this tool as a pre-commit hook. It automatically detects bug patterns across JavaScript, Python, Go, Rust, Java, and more, ensuring code quality before changes are saved.

Can I integrate static analysis into my CI/CD pipeline for AI-generated code?▼

Yes, you can integrate static analysis into CI/CD pipelines for AI-generated code. The tool operates as a quality gate with hooks for agents like Claude Code, catching null safety, security, and correctness issues in automated workflows.

Does pre-commit static analysis support output in SARIF format?▼

Pre-commit static analysis supports output in SARIF format, alongside human-readable text and JSON. This allows you to import automated bug detection results directly into code scanning dashboards for tracking.

What is the best way to catch security and performance bugs across JavaScript and Python?▼

The best way to catch security and performance bugs across JavaScript and Python is using a multi-language static analysis engine. It applies an 18-category, 4-layer detection process to identify and provide remediation guidance for issues before deployment.

How does deterministic static analysis work for multi-language bug detection?▼

Deterministic static analysis works by applying a 4-layer analysis engine to scan source code across multiple languages. It reliably identifies 18 categories of bug patterns without execution, delivering consistent findings for CI pipelines.

Do I need additional dependencies to run multi-language bug scanning locally?▼

No additional dependencies are required to run multi-language bug scanning locally. The tool operates independently to perform fast, deterministic static analysis directly on your changed files before committing.

Related Skills

Explore More Software Engineering Skills→
Sumeet138Sumeet138
1

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for CI/CD vulnerability scanning.

Community
Advanced
atomicinnovationatomicinnovation
30

pr-review-output-format

Define a standardized JSON output format for pull request review agents.

Official
Basic
haxlyshaxlys

block-no-verify-hook

Block git bypass flags like --no-verify and --no-gpg-sign via a Bash PreToolUse hook.

Community
Basic
alexei-ledalexei-led
35

reviewing-code

Detect languages in diffs and run linters, security checks, and coverage analysis.

Community
Advanced