[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6F424QB72BN50EYKJ75ADVM":3,"skill-same:01M6F424QB72BN50EYKJ75ADVM":47},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":22,"frontMatter":23,"refName":24,"commitSha":25,"skillDirectory":26,"forksCount":27,"repositoryHtmlUrl":28,"repositoryHomepageUrl":29,"ownerHtmlUrl":30,"ownerBlogUrl":6,"ownerDescription":31,"updatedAt":32,"install":33,"resources":46},"01M6F424QB72BN50EYKJ75ADVM","static-analysis",null,"ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FelizaOS\u002Feliza\u002Fstatic-analysis\u002FSKILL.md",[],[18,19],"static analysis","analysis","2026-11-10 10:12:30",false,"# Static Analysis\n\nComprehensive static analysis toolkit for security vulnerability detection, based on the [Trail of Bits Application Security Testing Handbook](https:\u002F\u002Fappsec.guide\u002F).\n\n## When to Use\n\n- Running security scans on codebases (any language)\n- Writing custom CodeQL queries or Semgrep rules\n- Processing and triaging SARIF output files from analysis tools\n- Setting up static analysis in CI\u002FCD pipelines\n- Comparing and aggregating results from multiple tools\n\n## When NOT to Use\n\n- Writing Semgrep rules from scratch (use semgrep-rule-creator skill instead)\n- Dynamic analysis or fuzzing (use testing-handbook-skills)\n- Smart contract auditing (use security-building-secure-contracts)\n\n## Sub-Skills\n\n| Tool | Purpose | Best For | Skill Path |\n|------|---------|----------|------------|\n| **CodeQL** | Semantic code analysis with database queries | Deep data flow tracking, taint analysis, cross-function analysis | [skills\u002Fcodeql\u002FSKILL.md](skills\u002Fcodeql\u002FSKILL.md) |\n| **Semgrep** | Fast pattern-matching static analysis | Quick scans, custom rules, CI integration, lightweight checks | [skills\u002Fsemgrep\u002FSKILL.md](skills\u002Fsemgrep\u002FSKILL.md) |\n| **SARIF Parsing** | Parse and process SARIF result files | Aggregating results, CI\u002FCD integration, multi-tool triage | [skills\u002Fsarif-parsing\u002FSKILL.md](skills\u002Fsarif-parsing\u002FSKILL.md) |\n\n## Tool Selection Guide\n\n| Scenario | Recommended Tool |\n|----------|-----------------|\n| Quick security scan | Semgrep |\n| Deep vulnerability analysis | CodeQL |\n| Data flow \u002F taint tracking | CodeQL (best) or Semgrep taint mode |\n| Custom pattern detection | Semgrep (simpler) or CodeQL (more powerful) |\n| CI\u002FCD integration | Semgrep (fastest) + CodeQL (thorough) |\n| Processing scan results | SARIF Parsing |\n| Non-building codebase | Semgrep (works on incomplete code) |\n\n## Quick Start\n\n### Semgrep (fast scan)\n```bash\n# Install\npip install semgrep\n\n# Run with recommended rulesets\nsemgrep --config=auto .\n\n# Run specific ruleset\nsemgrep --config=p\u002Fsecurity-audit .\n```\n\n### CodeQL (deep analysis)\n```bash\n# Create database\ncodeql database create mydb --language=python --source-root=.\n\n# Run security queries\ncodeql database analyze mydb codeql\u002Fpython-queries:codeql-suites\u002Fpython-security-extended.qls --format=sarif-latest --output=results.sarif\n```\n\n### SARIF Processing\n```bash\n# Parse results with jq\njq '.runs[].results[] | {ruleId, message: .message.text, location: .locations[0].physicalLocation.artifactLocation.uri}' results.sarif\n```\n\n## Workflow\n\n1. **Quick scan** with Semgrep for fast results\n2. **Deep analysis** with CodeQL for thorough coverage\n3. **Aggregate results** using SARIF parsing\n4. **Triage findings** by severity and exploitability\n5. **Custom rules** for project-specific patterns\n\n## Related Skills\n\n- **semgrep-rule-creator** - Dedicated skill for writing production-quality Semgrep rules\n- **variant-analysis** - Find similar vulnerabilities using CodeQL\u002FSemgrep patterns\n- **security-differential-review** - Security-focused code review using static analysis findings\n",{},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002FelizaOS\u002Feliza\u002Fstatic-analysis",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":7,"skillName":5,"commands":34,"prompt":44,"zipAvailable":45},[35,38,41],{"tool":36,"command":37},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill static-analysis",{"tool":39,"command":40},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill static-analysis",{"tool":42,"command":43},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill static-analysis","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FelizaOS\u002Feliza\u002Fstatic-analysis\u002FSKILL.md",true,[],[48,62,72,81,87,94],{"skillNo":49,"name":50,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":51,"categories":52,"keywords":58,"publishedAt":20},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[53],{"categoryNo":54,"categoryName":55,"taxonomyType":56,"taxonomyTypeDesc":57},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[59,60,61],"model","model hierarchy","model hierarchy skill",{"skillNo":63,"name":64,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":65,"categories":66,"keywords":68,"publishedAt":20},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[67],{"categoryNo":54,"categoryName":55,"taxonomyType":56,"taxonomyTypeDesc":57},[69,70,71],"MCP","zoom","zoom mcp",{"skillNo":73,"name":74,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":75,"categories":76,"keywords":77,"publishedAt":20},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[78,79,80,70],"sdk","zoom apps sdk","apps",{"skillNo":82,"name":83,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":84,"categories":85,"keywords":86,"publishedAt":20},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[83],{"skillNo":88,"name":89,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":93,"publishedAt":20},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[92],{"categoryNo":54,"categoryName":55,"taxonomyType":56,"taxonomyTypeDesc":57},[89],{"skillNo":95,"name":96,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":97,"categories":98,"keywords":99,"publishedAt":20},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[96]]