Key Features

Knows a bit about safe usage of unsafe functions
strcpy() with constant source string
va_args() in *printf family

Knows a bit about unsafe usage
strcat() in loops

Works by tokenizing lines (^ -> ;$)