Mosca is a tool that checks code for poor security practices akin to using grep against it for static analysis.
You can download it from the following link: https://packetstormsecurity.com/files/download/140064/Mosca-06.tar.gz
Source: https://packetstormsecurity.com/files/140064/Mosca-Analysis-Tool-0.06.html