Mosca is a tool that checks code for poor security practices akin to using grep against it for static analysis.
You can download it from the following link: https://packetstormsecurity.com/files/download/142569/Mosca-0.8.tar.gz
Source: https://packetstormsecurity.com/files/142569/Mosca-Analysis-Tool-0.08.html

