Taint Analysis Python Packages

triton-library

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

brokk-bifrost-searchtools

Multi-language static analysis for agents, editors, and large repositories.

brokk-bifrost

Multi-language static analysis for agents, editors, and large repositories.

palisade-sec

Applied agentic-safety infrastructure: statically detects, evaluates, and gates untrusted-input → LLM → exec/shell/SQL/HTTP paths in Python and JavaScript/TypeScript AI systems. Offline, keyless, precision-first; optional bring-your-own-endpoint judgment layer.

pyre-check-nightly

Performant type-checking for python.

agent-audit

Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

cobolwork

Security analysis for COBOL, JCL and CICS. Zero runtime dependencies.

aicaudit

aicaudit — AI-powered code audit for Python: taint-path static analysis + evidence-grounded AI verdicts. Every result ships with a machine-checkable source-to-sink path.

lachesis-cpg

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP — data- and taint-flow with source→sink witnesses, points-to, and guard/sink structure for security reasoning over source.

python-taint

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

pcdlint

Static Taint Linter for LLM Prompt-Cache Determinism (OpenAI & Anthropic)

ajar-scanner

Defensive security scanner: fail-open logic, insecure defaults & web vulns (SQLi, NoSQLi, XSS, SSRF, CSRF, secrets) with data-flow taint analysis across 8 languages (Python, JS, TS, Go, Java, PHP, C#). Also audits your own machine's exposed ports/firewall. Analyzes and protects — never attacks.

hackscan

Python SAST that verifies what it reports: AST + flow-sensitive taint, merges Semgrep/Bandit/CodeQL/Gitleaks, SARIF for GitHub

no-phone-home

Does this code phone home? A privacy-focused static analyzer that traces system, user and hardware data to network sinks and flags telemetry sent without an opt-out check — including inverted DO_NOT_TRACK guards. Python, JS/TS, Go. SARIF + Privacy Nutrition Label.

aether-lang

Security checker for Python, aimed at code AI agents write and run: SQL, command and code injection, deserialization, SSTI, XXE, hardcoded credentials. Emits SARIF for GitHub Code Scanning.

loomscan

Next-generation SAST combining Interval Type-2 Fuzzy Logic, AI verification, knowledge graphs, metamorphic testing, and counterfactual analysis for accurate security scanning.

ithildin

Semantic analyzer of EVM bytecode based on Mythril

polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

orihime

Cross-repo code knowledge graph for Java/Kotlin/JS/TS — MCP server, taint analysis, call graph, OWASP reports. 95% fewer tokens than source-reading.

aura-security

Python source code auditing and static analysis on a large scale

taintmonkey

MIT IEEE URTC 2025. GSET 2025. Repository for "TaintMonkey: Dynamic Taint Analysis of Python Web Applications Using Monkey Patching". A Pytest plugin incorporating fuzzing and taint analysis to uncover security vulnerabilities in Flask web applications.

flawed

Static analysis engine for Python web-applications

taint-analysis

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications