Tag
The article compares AI-powered security tools that detect real code vulnerabilities beyond basic linting, with mentions of tools like Snyk, Semgrep, and Coderabbit.
Paweł Huryn tested AI models' ability to find planted bugs in code, revealing that performance improvements come with exponentially increasing costs, as shown in a chart with a log scale.
Trail of Bits employed AI agents to develop custom security auditing tools and formal models for the Miden zero-knowledge VM, uncovering critical vulnerabilities and generating machine-checked correctness proofs.
The author highlights Crap4J as a valuable tool for identifying dangerous code in Java projects without false positives, praises its Jenkins integration, and notes its incompatibility with Java 7.
Kythe is a pluggable, language-agnostic ecosystem designed for building tools that work with code, providing a framework for developers.
An improved AI-based tool for detecting and analyzing code comments in software development.
A discussion or news item about the 'Sloc Cloc and Code' tool, possibly referencing a humorous or problematic aspect related to 'Buster Scrugged'.
Code2Skill is an automated pipeline that extracts verifiable skills from source code to improve AI agent performance, producing a large grounded skill bank that enhances agents before interaction experience.
Benzi is an AI coding agent that uses a tree-sitter based compiler to parse code into a precise, queryable map, achieving 78.2% on SWE-bench Verified with low cost.
This article introduces Claude.md doctor, an open-source agent skill that examines and grades CLAUDE.md or AGENTS.md files, providing fixes and backtesting for session flaws.
RealDiff is an open-source tool that detects runtime behavior changes in pull requests by comparing test outputs, highlighting unintended effects even in files not directly edited.
Understand Anything is an open-source tool that uses a multi-agent pipeline to analyze codebases and build interactive knowledge graphs, helping developers understand complex projects. It integrates with AI tools like Claude Code, Codex, Cursor, and has gained over 80,000 stars on GitHub.
The article details a problem in linters like ESLint where applying multiple fixes concurrently can lead to incorrect code, suggesting sequential fix application with re-analysis as a solution.
This article announces the release of Sloc Cloc and Code (scc) version 4.0.0, featuring new hotspot analysis to identify code files requiring attention based on complexity and commit history.
This post shares a GitHub repository, featuring a curated set of security vulnerability samples and benchmarks, to evaluate the capabilities of static analysis tools and large models in vulnerability mining and secure code generation, covering multiple languages and the latest research findings.
O artigo descreve as reflexões metacognitivas de um agente de codificação LLM no Devin/Cascade, expondo seu raciocínio e pontuações de confiança durante tarefas de análise de código.
Kesakode tool supports fuzzy-matching for function lookups to aid in obfuscation analysis, specifically in the context of #vidar malware.
Microsoft has released an open-source tool called AI Engineer Coach that analyzes and scores your AI coding habits，helping identify weaknesses and improve usage.
Open-Kritt is an open-source security research platform that orchestrates multiple AI agents to analyze code in parallel, automating discovery of real vulnerabilities, and supports deduplication, validation, and prioritization. The team behind it has used it to earn significant bounties and win the Firedancer audit contest.
ReadmeAI is a Python CLI tool that automatically generates structured README files from local or remote repositories using AI models or offline mode, supporting multiple providers and customization.