菜单
Analyze code complexity, maintainability, and security issues
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Next-generation 0day discovery & exploit development — comprehensive code analysis, allocator vulnerabilities, compiler-induced bugs, SIMD/vector issues, JIT vulnerabilities, custom allocator attacks, ASLR/kASLR bypass, UAF, OOB, RCE with exploit generation, privilege escalation, backdoor establishment
Next-generation 0day discovery — novel overflow patterns, allocator exploits, compiler-induced bugs, bounds-check bypass, SIMD/vector overflows, JIT vulns, custom allocator attacks, ASLR/kASLR bypass, UAF, OOB, RCE with weaponized exploit generation, privilege escalation, backdoor establishment
Container escape vulnerability discovery — Docker, Kubernetes, container runtime exploitation, namespace isolation bypass, privilege escalation through container boundaries
Crypto implementation analysis — weak algorithms, side-channels, key management flaws, padding oracles, random generation failures, implementation bugs
IoT device security analysis — firmware extraction, RTOS exploits, hardware interfaces, protocol vulnerabilities, side-channel attacks, update mechanism exploitation
Industrial control system security — Modbus, DNP3, IEC 104, Ethernet/IP, PLC exploitation, control logic manipulation, sensor/actuator attacks, ICS protocol analysis
| name | Code Quality Metrics |
| description | Analyze code complexity, maintainability, and security issues |
| tags | ["quality","complexity","security","metrics","technical-debt"] |
| allowed_tools | ["analyze_code_metrics","get_function_security_score","decompile_function","list_imports"] |
Task: Code Quality Analysis. Evaluate binary code for complexity, maintainability, and security.
Grade Scale:
Point Deductions:
Full Binary Analysis
Use analyze_code_metrics() for comprehensive report
- All functions analyzed
- Aggregate statistics
- Security score with grade
- Most complex/largest functions
Function-Level Analysis
Use get_function_security_score(address) for specific function
- Detailed complexity breakdown
- Security issues found
- Code smells detected
- Specific recommendations
Issue Remediation
Priority Order:
1. Critical severity (hardcoded credentials, unsafe ops)
2. High severity (weak crypto, null derefs)
3. Medium severity (random issues)
4. Code smells (complexity, size)
[Code Quality Report]
Binary: target.exe
Date: 2024-01-15
[Summary]
Functions: 1250
Average Complexity: 8.5
High Complexity Functions: 45 (3.6%)
Large Functions: 18 (1.4%)
[Security Score]
Grade: C (72/100)
Critical: 2 issues
High: 8 issues
Medium: 15 issues
[Most Complex Functions]
1. ProcessRequest (Complexity: 87, Size: 1245 instr)
- Issues: god_function, magic_numbers
- Recommends: Split into 5-6 functions
2. ParseInput (Complexity: 76, Size: 892 instr)
- Issues: deep_nesting, unsafe_string_ops
- Recommends: Reduce nesting, use safe functions
[Security Issues]
CRITICAL: Hardcoded credentials
- Location: 0x140001200 (verify_password)
- Pattern: password = "admin123"
HIGH: Unsafe string operations
- Location: 0x140001500 (copy_data)
- Functions: strcpy, sprintf