Cybersecurity

knowledge skill

Performs static analysis on source code to detect security vulnerabilities. Produces a prioritized list of issues with severity ratings and code locations.

Worked examples

• {"input": {"target": "https://github.com/example/webapp", "rules": "/configs/security_rules.json", "depth": 5}, "output": {"issues": [{"id": "SQL_INJECTION_001", "severity": "high", "file": "src/models/user.py", "line": 42, "description": "Unsanitized input in raw SQL query"}], "stats": {"total": 17, "high": 3, "medium": 8, "low": 6}, "timestamp": "2024-05-20T14:30:12Z"}}
• {"input": {"target": "/projects/api/src/main/java/com/example/AuthService.java"}, "output": {"issues": [{"id": "INSECURE_HASH_002", "severity": "medium", "file": "AuthService.java", "line": 118, "description": "Use of MD5 for password hashing"}], "stats": {"total": 1, "high": 0, "medium": 1, "low": 0}, "timestamp": "2024-05-20T15:15:45Z"}}

Input

• target: string / file path or URL to source code repository
• rules: string / path to custom security ruleset file (optional)
• depth: integer / maximum recursion depth for analysis (default: 3)

Output

• issues: array / list of detected vulnerabilities
• stats: object / summary metrics (total issues, high/medium/low severity counts)
• timestamp: string / ISO 8601 timestamp of analysis completion

Details

• Skill type: knowledge skill
• Safety level: safe_public_research
• Version: 1.0.0