GlobalProtect-openconnect

Project overview

Skill Scanner checks individual skills, directories, or repositories with static rules, shell-pipeline taint analysis, Python dataflow analysis, and optional LLM or cloud engines. It can produce SARIF or HTML reports and run in CI or pre-commit workflows with custom policies. Results are best effort: finding nothing does not certify a skill as safe, so human review remains necessary.

Project overview

Electronegativity is a static analysis tool for Electron developers and security auditors. It parses AST and DOM structures in source directories, JavaScript, HTML, or ASAR packages to identify security-relevant configuration mistakes and implementation anti-patterns, with CSV or SARIF output available. Findings can require manual investigation by someone familiar with Electron security, and the open-source project is no longer actively maintained.