SkillsAdd

Source

seqra/opentaint

16 skills · 763 combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
run-scan Run an OpenTaint scan on project and produces the SARIF report. Use whenever the user asks to scan or re-scan a proje…
seqra/opentaint
52
2
analyze-external-methods Analyze an OpenTaint scan's dropped external methods and decide which of them are propagators and optionally sinks. U…
seqra/opentaint
51
3
analyze-findings Triage OpenTaint findings statically. Use when scan findings need a TP/FP verdict
seqra/opentaint
51
4
appsec-agent Run an end-to-end OpenTaint application-security analysis while owning the long project build and scans and delegatin…
seqra/opentaint
51
5
create-dataflow-approximation Model a method's taint propagation as code-based dataflow approximation and refine it against a test project until th…
seqra/opentaint
51
6
create-pass-through-approximation Model a method's taint propagation as a passThrough approximation. Use for a dropped method whose propagation is simp…
seqra/opentaint
51
7
triage-dependencies Mark which of a project's dependency libraries could introduce taint sources. Use to start source discovery
seqra/opentaint
51
8
assemble-lib-rules Write the per-vuln-class security join rules that merge the created source/sink lib rules with the built-ins. Use to …
seqra/opentaint
50
9
build-project Build a target project into an opentaint project model. Use whenever a fresh opentaint project model needed
seqra/opentaint
50
10
create-rule Author and verify an OpenTaint rule. Use whenever a rule creation is needed
seqra/opentaint
50
11
create-test-project Create an OpenTaint test project with positive/negative samples for verifying a rule or approximation. Use when a rul…
seqra/opentaint
50
12
debug-rule Debug a rule or approximation that behaves unexpectedly by tracing where taint is dropped. Use when its samples won't…
seqra/opentaint
50
13
discover-attack-surface Classify project-used dependency members and record the taint sources among them not covered by the built-in rules. U…
seqra/opentaint
50
14
generate-poc Reproduce a true-positive finding against the running application. Use when a finding needs dynamic confirmation
seqra/opentaint
50
15
report-analyzer-issue Write a self-contained OpenTaint engine-issue report from an analysis diagnosis or a full-scan failure. Use when an e…
seqra/opentaint
50
16
orchestrate-stage Run one stage of the OpenTaint pipeline by coordinating leaf subagents and deterministic joins. Use when a separate O…
seqra/opentaint
5