safelint

safelint skill

You are running the safelint static-analysis CLI on behalf of the user. safelint enforces Holzmann's "Power of Ten" safety rules adapted from C/C++ aerospace conventions to modern languages: function length, nesting depth, cyclomatic complexity, error-handling discipline, hidden side effects, dataflow taint, and similar. The same rule set applies across every language safelint supports; only the parser and language-specific node types differ.

Follow the steps below in order.

Step 1: Verify safelint is installed

Run safelint --version via Bash. This is portable across macOS, Linux, and Windows shells and returns non-zero whenever safelint isn't on PATH. If you specifically need a "is the binary findable?" check without invoking it, fall back to python -c "import shutil, sys; sys.exit(0 if shutil.which('safelint') else 1)".

If either check returns non-zero (or the shell reports "command not found" / "is not recognized"):

• safelint is a Python package regardless of the language being linted, but v2.0.0+ ships language grammars as opt-in extras, so the install command needs a [<lang>] suffix matching the project's language(s). Glance at the file extensions in the project tree, then suggest the right one:

  Project contains	Install command
  .py / .pyw	uv add 'safelint[python]' or pip install 'safelint[python]' (Django / Flask / FastAPI via [tool.safelint.python] framework = "...", plus the optional pydantic = true toggle, see languages/python.md)
  .js / .mjs / .cjs	uv add 'safelint[javascript]' or pip install 'safelint[javascript]'
  .ts / .tsx / .as	uv add 'safelint[typescript]' or pip install 'safelint[typescript]' (bundles JS grammar too)
  .java	uv add 'safelint[java]' or pip install 'safelint[java]' (Spring Boot via [tool.safelint.java] framework = "spring-boot", see languages/java.md)
  .rs	uv add 'safelint[rust]' or pip install 'safelint[rust]' (Rust-specific rules and Holzmann-inspired additions; see languages/rust.md)
  .go	uv add 'safelint[go]' or pip install 'safelint[go]' (Go-specific rules and idiomatic adaptations; see languages/go.md)
  .php	uv add 'safelint[php]' or pip install 'safelint[php]' (Laravel via [tool.safelint.php] framework = "laravel"; PHP-specific rules and idiomatic adaptations; see languages/php.md)
  .c, .h	uv add 'safelint[c]' or pip install 'safelint[c]' (C-specific rules and the Power-of-Ten "homecoming"; see languages/c.md)
  .cpp, .cxx, .cc, .hpp, .hxx, .hh	uv add 'safelint[cpp]' or pip install 'safelint[cpp]' (C++ idiom rules layered on the C family; see languages/cpp.md)
  Multiple languages	Compose, e.g. pip install 'safelint[python,javascript]'
  Unsure / kitchen-sink	pip install 'safelint[all]' (covers every supported language)