semantic-code-analyzer

name	semantic-code-analyzer
description	LLM-powered semantic analysis of code diffs to detect business-logic trojans
allowed-tools	["Bash","Read","Glob","Grep"]
graph	{"domains":["domain:security"],"specializations":["specialization:security-compliance"],"skillAreas":["skill-area:sast","skill-area:code-cybersecurity"],"roles":["role:security-engineer","role:compliance-engineer"],"workflows":["workflow:security-audit","workflow:vulnerability-management"]}

Semantic Code Analyzer

LLM-powered semantic analysis engine that detects business-logic trojans by comparing code intent (docstrings, function names, variable names) against actual implementation behavior.

Purpose

The core detection capability of nation-state trojan detection. Traditional SAST tools check syntax; this skill checks semantics — whether the code does what it claims to do. It catches operator substitutions, logic inversions, constant manipulation, narrative camouflage, and compound self-masking attacks.

Capabilities

Intent vs Implementation Analysis

• Reads function names, docstrings, and variable names to establish intent
• Traces code execution to determine actual behavior
• Flags any contradiction as a potential trojan indicator

Mathematical Verification

• Plugs concrete values into changed formulas
• Computes before/after results to quantify impact
• Detects ratio inversions (a/b vs b/a), precision loss (/ vs //), and threshold shifts