Use to run real static analysis over a diff or repo before shipping — Semgrep, CodeQL, secret scanning, dependency CVEs — and triage the findings into what must be fixed now versus noise. Trigger before a release or PR merge, during a security review, or when the user asks to scan the code for vulnerabilities.
Install
npx skills add OneWave-AI/claude-skills --skill static-analysis-sweepnpx skills add OneWave-AI/claude-skills --skill static-analysis-sweep -a claude-code -gnpx skills add OneWave-AI/claude-skills --skill static-analysis-sweep -a codex -ggemini skills install https://github.com/OneWave-AI/claude-skills.git --path static-analysis-sweepgh skill install OneWave-AI/claude-skills static-analysis-sweepgit clone --depth 1 https://github.com/OneWave-AI/claude-skills /tmp/OneWave-AI__claude-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/OneWave-AI__claude-skills/static-analysis-sweep ~/.claude/skills/static-analysis-sweep # Claude Code
cp -R /tmp/OneWave-AI__claude-skills/static-analysis-sweep ~/.agents/skills/static-analysis-sweep # Codex, Cursor, Gemini CLI, Copilot, OpenCode