Runs and interprets static analysis tooling - CodeQL, Semgrep, and SARIF output parsing - across a codebase.
Visit skill This is mine — claim it
Source: https://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/semgrep
Listing URL: https://wingmanprotocol.com/skills/static-analysis/
Show your listing is live — the card backlinks here and picks up the verified badge automatically once you claim it.
<iframe src="https://wingmanprotocol.com/embed/card/static-analysis" width="340" height="170" style="border:0;border-radius:10px" loading="lazy" title="Static Analysis — live on WingMan Protocol"></iframe>
Or the one-line script:
<script src="https://wingmanprotocol.com/embed/card.js" data-slug="static-analysis" async></script>
Or a README badge:
[](https://wingmanprotocol.com/directory/static-analysis?utm_source=badge)
Trail of Bits' smart-contract security toolkit - vulnerability scanners for Solana, Cairo, Cosmos, Substrate, Algorand, and TON, plus audit-prep, code-maturity,
Designs and troubleshoots Cloudflare One Zero Trust deployments - Access, Gateway, WARP, Tunnel, DLP, CASB, device posture.
Checks cryptographic code for timing side-channels - non-constant-time branches or memory access.
Diagnoses Elasticsearch authentication, authorization, and access-control issues.
Creates OAuth2-capable AI-agent identities through Microsoft Entra Agent ID and the Graph beta API.
Runs and interprets ffuf web-fuzzing scans for content/parameter/vhost discovery during security testing.