seqra/opentaint

create-dataflow-approximation

Model a method's taint propagation as code-based dataflow approximation and refine it against a test project until the sample passes. Use for a dropped method that requires code-based approximation

لغة النص الأصلي: الإنجليزية

create-test-project

Create an OpenTaint test project with positive/negative samples for verifying a rule or approximation. Use when a rule or approximation needs a test project to check against

لغة النص الأصلي: الإنجليزية

run-scan

Run an OpenTaint scan on project and produces the SARIF report. Use whenever the user asks to scan or re-scan a project

لغة النص الأصلي: الإنجليزية

analyze-external-methods

Analyze an OpenTaint scan's dropped external methods and decide which of them are propagators and optionally sinks. Use when a dropped-external-methods.yaml needs classification for dropped method type

لغة النص الأصلي: الإنجليزية

analyze-findings

Triage OpenTaint findings statically. Use when scan findings need a TP/FP verdict

لغة النص الأصلي: الإنجليزية

appsec-agent

Run an end-to-end OpenTaint application-security analysis while owning the long project build and scans and delegating each other pipeline stage. Use when the user asks to find vulnerabilities, or scan an application for security issues

لغة النص الأصلي: الإنجليزية

assemble-lib-rules

Connect the shared untrusted-data source group to new reusable OpenTaint sink groups. Use to wire new sink tags into security joins

لغة النص الأصلي: الإنجليزية

build-project

Build a target project into an opentaint project model. Use whenever a fresh opentaint project model needed

لغة النص الأصلي: الإنجليزية

create-pass-through-approximation

Model a method's taint propagation as a passThrough approximation. Use for a dropped method whose propagation is simple copying

لغة النص الأصلي: الإنجليزية

create-rule

Author and verify an OpenTaint rule. Use whenever a rule creation is needed

لغة النص الأصلي: الإنجليزية

discover-attack-surface

Classify project-used dependency members and record taint sources as rule-authoring units. Use for the source-discovery depth pass

لغة النص الأصلي: الإنجليزية

generate-poc

Reproduce a true-positive finding against the running application. Use when a finding needs dynamic confirmation

لغة النص الأصلي: الإنجليزية

orchestrate-stage

Run one stage of the OpenTaint pipeline by coordinating leaf subagents and deterministic joins. Use when a separate OpenTaint pipeline stage needs to be executed

لغة النص الأصلي: الإنجليزية

triage-dependencies

Mark which of a project's dependency libraries could introduce taint sources. Use to start source discovery

لغة النص الأصلي: الإنجليزية

debug-rule

Debug a rule or approximation that behaves unexpectedly by tracing where taint is dropped. Use when its samples won't pass after repeated attempts, or it passes tests but is wrong on a real scan

لغة النص الأصلي: الإنجليزية

report-analyzer-issue

Write a self-contained OpenTaint engine-issue report from an analysis diagnosis or a full-scan failure. Use when an engine-side issue needs a report

لغة النص الأصلي: الإنجليزية