Static Analysis — Security agent for Claude Code
Use after code-generator completes to run static analysis tools and report findings.
How to install Static Analysis
Installs to ~/.claude/agents/valpere-session-indexer-static-analysis.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/valpere/session-indexer/HEAD/.claude/agents/static-analysis.md -o ~/.claude/agents/valpere-session-indexer-static-analysis.md Restart Claude Code, or start a new session, for it to be picked up.
What Static Analysis does
name: static-analysis description: "Use after code-generator completes to run static analysis tools and report findings. Runs in parallel with security-reviewer. Reports findings only — does not apply fixes unless they are trivial formatting issues. Invoke as part of the post-implementation review pipeline.\n\n\nContext: code-generator has completed an implementation and the pipeline needs quality checks.\nuser: \"Run static analysis on the changes\"\nassistant: \"Launching static-a
Alternatives in Security
- Security Sast — Static Application Security Testing (SAST) for comprehensive code vulnerability detection across mul 31.9k ★
- Brain — Central knowledge coordinator 812 ★
- PHP Test Validator — Validates PHPUnit test comprehensiveness and integrity 129 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Report Agent
Security report writer agent. Use after the Red Team Agent completes an attack to generate professional penetr
Principal Code Reviewer
Review non-trivial Kotlin/Java changes, crash/file/auth/navigation/lifecycle/security fixes, or multi-file dif
Docs Fixer
Applies validated fixes from docs-checker audit reports. Re-validates factual accuracy findings before applyin
Docs Tutorial Fixer
Applies validated fixes from docs-tutorial-checker audit reports. Re-validates pedagogical findings before app
Sast
Lightweight static analysis (architecture, threat model, triage sweep). White-box only, runs parallel with rec
Analysis Orchestrator
Use when the root orchestrator needs a read-only codebase audit — selects a subset of its 6 lenses by objectiv
Related Skills
Review Implementation
Independent implementation audit of uncommitted code by Codex CLI against a plan doc, then apply agreed fixes
Gh Review Loop
Fixes the AI reviewer findings on your PR, including the sibling instances the bot missed. Runs your tests bef
Buddhi Review
Automated multi-reviewer pull-request review for Claude Code: fan out AI reviewers, classify findings, guide f