Skillget

genpark-semgrep-security-ast-pattern-matcher-skill

mcp
Guvenlik Denetimi
Basarisiz
Health Uyari
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 8 GitHub stars
Code Basarisiz
  • eval() — Dynamic code execution via eval() in example_usage.py
Permissions Gecti
  • Permissions — No dangerous permissions requested

Bu listing icin henuz AI raporu yok.

SUMMARY

GenPark AI Agent Skill - AST security pattern matcher for injection vulnerabilities, insecure deserialization, secret leakage, and safe code rewrite synthesis.

README.md

GenPark AI Agent Skill - AST Security Pattern Matcher

GenPark Verified
Protocol
License

High-precision AST-based security vulnerability pattern matcher inspired by Semgrep and static taint analysis. Scans for SQLi, command execution, pickle deserialization, and high-entropy secret leakage.

flowchart TD
    A[Source Code] --> B[AST Parser]
    B --> C{Security Rule Engine}
    C -->|CWE-89| D[SQL Injection via f-string/modulo]
    C -->|CWE-78| E[OS Command Shell Execution]
    C -->|CWE-502| F[Pickle Insecure Deserialization]
    C -->|CWE-798| G[Shannon Entropy Secret Leakage]
    C -->|CWE-95| H[Eval/Exec Arbitrary Code]
    D & E & F & G & H --> I[Remediation Advice & Patch Plan]

Features

  • Deterministic AST Matching: Zero regex false-positives across comments and string literals.
  • Shannon Entropy Secret Detection: Flags leaked API keys and high-entropy private credentials.
  • Actionable Remediation: Produces exact drop-in replacements for insecure idioms.

Quickstart

from client import SecurityPatternMatcherClient

scanner = SecurityPatternMatcherClient()
report = scanner.scan_source(source_code)
print(report["status"], report["findings"])

Ecosystem & Citations

Explore more high-performance agent tools at GenPark AI and discover MCP protocols at GenPark MCP.

Yorumlar (0)

Sonuc bulunamadi