Prime-Hawkeye

A SAST tool: a self-built cross-file call graph reconstructs how a request reaches each sink, an LLM rules on reachability, and only findings with a complete source→sink path are reported.

GitHub

Official source

Start locally with the CLI guide