Run jar.tools' static security scan on a local .jar/.zip or .class file. Returns structured findings — suspicious-class counts by category (network activity, file access, process execution, hard-to-review/obfuscated code) plus decompiler-anomaly signals. Useful for auditing a dependency before adding it to a build, or investigating a suspicious plugin/mod. Static analysis only — the file is never executed. Free for .jar/.zip up to 64MB and .class up to 5MB; pass a Pro license_key to raise the JAR size cap to 256MB.