dannyan/secguard-clang

dannyan/secguard-clang · AGENTS.md

dannyan/secguard-clang · CLAUDE.md

dannyan/secguard-clang · extension/DESIGN.md

dannyan/secguard-clang · extension/shared/skills/argument-type/SKILL.md · Classify argument-type evidence — an explicit pointer cast passes an incompatible object type to a function parameter…

dannyan/secguard-clang · extension/shared/skills/buffer-overflow/SKILL.md · Classify buffer overflow evidence — BUFFER_ACCESS events from unsafe memcpy/strcpy/sprintf/strcat calls, array/heap…

dannyan/secguard-clang · extension/shared/skills/crypto-misuse/SKILL.md · Classify cryptographic misuse evidence — weak algorithms, weak PRNG, and undersized keys. Maps to CWE-327.

dannyan/secguard-clang · extension/shared/skills/dangerous-function/SKILL.md · Classify dangerous-function evidence — a call to a banned libc/runtime function or a non-safe API that must be replaced…

dannyan/secguard-clang · extension/shared/skills/data-representation/SKILL.md · Classify data-representation evidence — a generic/opaque-pointer consumer misinterprets the object representation the…

dannyan/secguard-clang · extension/shared/skills/deadlock/SKILL.md · Classify deadlock evidence — lock-order inversion and nested locking patterns. Maps to CWE-667.

dannyan/secguard-clang · extension/shared/skills/divide-by-zero/SKILL.md · Classify divide-by-zero / modulo-by-zero evidence — a divisor that is not a provably non-zero constant. Maps to CWE-369.

dannyan/secguard-clang · extension/shared/skills/double-free/SKILL.md · Classify double-free evidence — same variable freed twice. Maps to CWE-415.

dannyan/secguard-clang · extension/shared/skills/format-string/SKILL.md · Classify format string vulnerability evidence — printf-family called with non-literal format argument. Maps to CWE-134.

dannyan/secguard-clang · extension/shared/skills/hardcoded-secret/SKILL.md · Classify hardcoded secret evidence — hardcoded passwords, API keys, tokens, and credential persistence. Maps to CWE-798.

dannyan/secguard-clang · extension/shared/skills/implicit-contract/SKILL.md · Classify implicit-contract evidence — a caller/framework-supplied struct field is dereferenced with no dominating null…

dannyan/secguard-clang · extension/shared/skills/injection/SKILL.md · Classify injection evidence — command (CWE-78), SQL (CWE-89), argument (CWE-88), XML/XPath (CWE-91), CRLF (CWE-93), log…

dannyan/secguard-clang · extension/shared/skills/integer-overflow/SKILL.md · Classify integer overflow and unsigned underflow evidence from arithmetic used in sizes or call arguments. Maps to…

dannyan/secguard-clang · extension/shared/skills/memory-leak/SKILL.md · Classify memory-leak evidence — MEMORY_ALLOC events where an allocated block is lost on some path with no reachable…

dannyan/secguard-clang · extension/shared/skills/null-deref/SKILL.md · Classify null dereference evidence — NULL_VALUE source, DEREFERENCE event, NULL_GUARD counter-evidence. Maps to CWE-476.

dannyan/secguard-clang · extension/shared/skills/out-of-bounds/SKILL.md · Classify out-of-bounds read evidence — BUFFER_ACCESS events with array_oob_read/heap_oob_read categories. Maps to…

dannyan/secguard-clang · extension/shared/skills/path-traversal/SKILL.md · Classify path-traversal evidence — a filesystem sink receiving a non-literal path argument. Maps to CWE-22.

dannyan/secguard-clang · extension/shared/skills/race-condition/SKILL.md · Classify race condition evidence — TOCTOU (access→fopen), shared-state (lock→unlock→mutate), and classic…

dannyan/secguard-clang · extension/shared/skills/resource-leak/SKILL.md · Classify resource leak evidence — RESOURCE_ACQUIRE events where a file descriptor, socket, or handle is acquired but…

dannyan/secguard-clang · extension/shared/skills/signal-handler/SKILL.md · Classify signal handler evidence — a signal(2) handler that calls a non-async-signal-safe libc function. Maps to…

dannyan/secguard-clang · extension/shared/skills/signed-compare/SKILL.md · Classify signed-compare evidence — an unsigned variable compared with zero/negative, which is always false. Maps to…

dannyan/secguard-clang · extension/shared/skills/sizeof-misuse/SKILL.md · Classify sizeof-misuse evidence — sizeof applied to a pointer variable inside a size context. Maps to CWE-467/CWE-468.