bandit, ruff, semgrep, pip_audit = await asyncio.gather(
    run_bandit(project_dir),      # безопасность: SQL-инъекции, eval, хардкод
    run_ruff(project_dir),        # стиль и баги: импорты, синтаксис, except
    run_semgrep(project_dir),     # глубокий анализ: XSS, RCE, утечки
    run_pip_audit(project_dir)    # зависимости: CVE в пакетах
)

# main.py:42 — Bandit HIGH
query = f"SELECT * FROM users WHERE id = {user_input}"  # SQL-инъекция

# core/langs/ТВОЙ_ЯЗЫК.py
import asyncio
import json
from typing import Dict, Any
from core.langs.base import BaseLanguageAnalyzer


class ТВОЙ_ЯЗЫКAnalyzer(BaseLanguageAnalyzer):
name = "ТВОЙ_ЯЗЫК" # JavaScript, Go, Rust...

async def analyze(self, project_dir: str) -> Dict[str, Any]:
results = {}
total_issues = {}

# Запуск линтера
lint_result = await self._run_command([
"линтер", project_dir, "--format", "json"
])

lint_issues = []
if lint_result.get("stdout"):
try:
data = json.loads(lint_result["stdout"])
for item in data:
lint_issues.append({
"file": item.get("filePath"),
"line": item.get("line"),
"message": item.get("message"),
"rule": item.get("ruleId")
})
except:
pass

results["linter"] = {"results": lint_issues, "error": None}
total_issues["linter"] = len(lint_issues)

return {
"language": self.name,
**results,
"total_issues": total_issues
}

async def _run_command(self, cmd: list) -> Dict[str, Any]:
proc = await asyncio.create_subprocess_exec(
*cmd,
stdout=asyncio.subprocess.PIPE,
stderr=asyncio.subprocess.PIPE
)
stdout, stderr = await proc.communicate()
return {
"stdout": stdout.decode('utf-8', errors='ignore'),
"stderr": stderr.decode('utf-8', errors='ignore'),
"returncode": proc.returncode
}

def get_context_for_llm(self, results: Dict[str, Any]) -> str:
total = results.get("total_issues", {})
return f"{self.name}-проект. Найдено проблем: {sum(total.values())}"```