static analysis commands

clay-good/OpenLore

Command Claude Code

Find and fix bugs that break OpenLore's first-run experience by dogfooding the real install flow on a clean repo (the method that found the orient-CLI, --no-embed, watcher-EMFILE, and install-index bugs).

clay-good/OpenLore

Command

Post-implementation spec drift check — verify the implementation matches existing OpenSpec specifications.

clay-good/OpenLore

Command

Pre-flight structural risk check — orient + analyzeimpact before implementation. Gates on riskScore ≥ 70.

DSB-117/brainblast

Command

Deployment Intelligence for Anchor programs. Run before anchor deploy so you know how much SOL you need and the exact ordered transaction sequence — instead of working it out by hand.

DSB-117/brainblast

Command

Live On-Chain Intelligence: is the oracle fresh? Before you price anything against a Pyth / Switchboard / Chainlink feed, check when its account was last written.

DSB-117/brainblast

Command

Runs a two-part token check on any Solana contract address (CA).

ThreeMoonsLab/agents-shipgate

Command Claude Code

Run the prominent Agents Shipgate flows: check, verify, or audit --host.

skymanbp/CodeEraser

Command

Check for a newer CodeEraser release and say how this install updates.

panbanda/omen

Command

Generate a complete HTML health report with LLM-generated insights.

serpentine-parser/serpentine

Command Claude Code

Use the Bash tool to run this playwright script to capture a screenshot AND console errors.

zsutxz/ClaudeLearning

Command Claude Code

Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks.

ReviewToolkits/cpython-security-toolkit

Command

Archive extraction boundary analysis. Checks whether CPython's tarfile, zipfile, and shutil.unpackarchive implementations correctly enforce the invariant that no extraction path may write outside the declared destination directory.

ReviewToolkits/cpython-security-toolkit

Command

Protocol validation coverage analysis. Checks whether security-sensitive values in CPython's HTTP, cookie, WSGI, and URL handling modules are validated consistently across all code paths — including update methods, operator overloads, unpickling, and template substitution paths.

ReviewToolkits/cpython-security-toolkit

Command

Full security scan of a CPython source tree using all four engines.