# Static Analysis Tools Skill

> Static Analysis Tools Skill is an Agent Skill for devops & security published in the a5c-ai/babysitter repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Integration with security-focused static analysis tools

- Skill name: `Static Analysis Tools Skill`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/a5c-ai/babysitter/blob/HEAD/library/specializations/security-research/skills/static-analysis-tools/SKILL.md
- Repository: a5c-ai/babysitter (1,548 GitHub stars when collected)

## SKILL.md

# Static Analysis Tools Skill

## Overview

This skill provides integration with security-focused static analysis tools for comprehensive code security analysis.

## Capabilities

- Execute Semgrep rules and custom patterns
- Run CodeQL queries for vulnerability detection
- Execute Bandit (Python), Brakeman (Ruby), etc.
- Parse and interpret static analysis results
- Generate custom detection rules
- Aggregate findings across tools
- Map findings to CWE/CVE identifiers
- Support SAST pipeline integration

## Target Processes

- static-code-analysis.js
- variant-analysis.js
- web-app-vuln-research.js
- api-security-research.js

## Dependencies

- Semgrep CLI
- CodeQL CLI and databases
- Language-specific analyzers:
  - Bandit (Python)
  - Brakeman (Ruby)
  - gosec (Go)
  - SpotBugs (Java)
- Python for result aggregation

## Usage Context

This skill is essential for:
- Security code review automation
- Vulnerability pattern detection
- Custom security rule development
- CI/CD security gate integration
- Variant analysis across codebases

## Integration Notes

- Supports multiple output formats (SARIF, JSON, custom)
- Can run incrementally on changed files
- Integrates with IDE and CI/CD workflows
- Custom rules can be version controlled
- Results can be deduplicated and triaged

---

Source: https://www.openparable.com/skill/devops-security/static-analysis-tools-skill (OpenParable). Cite the canonical URL above.