domains / families / software-engineering / phy-concurrency-audit

phy-concurrency-audit

separate

Static concurrency and race-condition auditor for Go, Java, Python, Node.js/TypeScript. Detects shared-state mutations without locks (Go map races, Java non-atomic increments, Python thread/asyncio shared lists), TOCTOU (time-of-check-time-of-use) patterns across all languages, sync.Mutex copied by value, WaitGroup.Add inside goroutines, SimpleDateFormat as instance field, double-checked locking without volatile, asyncio shared state without Lock. Maps findings to CWE-362 (race condition) and CWE-367 (TOCTOU). Zero competitors on ClawHub — not a single concurrency-audit SKILL.md in 13,700+ files.

When to use

• Go race conditions
• Java thread-safety violations
• Python threading and asyncio races
• Node.js and TypeScript async races
• TOCTOU patterns across all languages
• CWE-362 race condition detection
• CWE-367 TOCTOU vulnerability detection

Skill page

Source