Static Analysis Tools Skill
Integration with security-focused static analysis tools
npx skills add a5c-ai/babysitter --skill static-analysis-tools --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Static Analysis Tools Skill ## Overview This skill provides integration with security-focused static analysis tools for comprehensive code security analysis. ## Capabilities - Execute Semgrep rules and custom patterns - Run CodeQL queries for vulnerability detection - Execute Bandit (Python), Brakeman (Ruby), etc. - Parse and interpret static analysis results - Generate custom detection rules - Aggregate findings across tools - Map findings to CWE/CVE identifiers - Support SAST pipeline integration ## Target Processes - static-code-analysis.js - variant-analysis.js - web-app-vuln-research.js - api-security-research.js ## Dependencies - Semgrep CLI - CodeQL CLI and databases - Language-specific analyzers: - Bandit (Python) - Brakeman (Ruby) - gosec (Go) - SpotBugs (Java) - Python for result aggregation ## Usage Context This skill is essential for: - Security code review automation - Vulnerability pattern detection - Custom security rule development - CI/CD security gate integration - Variant analysis across codebases ## Integration Notes - Supports multiple output formats (SARIF, JSON, custom) - Can run incrementally on changed files - Integrates with IDE and CI/CD workflows - Cus
- Overview
- Capabilities
- Target Processes
- Dependencies
- Usage Context
- Integration Notes
What does the Static Analysis Tools Skill skill do?
Integration with security-focused static analysis tools
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill static-analysis-tools --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.