Static security checks analyze source code before execution, with common techniques including AST parsing, dangerous-function blacklists, and pattern matching; the advantages are zero runtime overhead and early interception, while the disadvantage is difficulty handling evasions such as string concatenation, dynamic imports, and obfuscation.