sast-skills

Transform your AI coding assistant into a SAST scanner to automatically detect vulnerabilities in code.

Agent SkillDevOpen source

Type: Agent Skill
Open source: Yes
GitHub Stars: ★ 1.1k
Source: skill-github
Repository: github.com/utkusen/sast-skills

Overview

sast-skills is a set of agent skills that turns your LLM coding assistant into a fully functional SAST scanner for identifying vulnerabilities in codebases. Supports IDEs such as Claude Code, Codex, Opencode, Cursor, and more. No third-party tools required. The skill set operates in three steps: 1. Codebase analysis; 2. Parallel vulnerability detection; 3. Report generation. Final reports are sorted by severity and include complete remediation guidance and dynamic testing instructions.

Capabilities

▪Codebase reconnaissance and architecture mapping
▪SQL injection detection
▪GraphQL injection detection
▪Cross-site scripting detection
▪Remote code execution detection
▪Server-side request forgery detection

Use cases

Code auditingSecurity vulnerability detectionAutomated security assessmentCode quality improvement

Setup

Requires: AI编码助手项目代码

Copy your project into the `sast-files` folder, then open `sast-files` as a workspace in your AI coding assistant.
```bash
cp -r /path/to/your/project sast-files/```

This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.

FAQ

How do I get started?

Copy your project into the `sast-files` folder, then open and run the vulnerability scan in your AI coding assistant.

Which IDEs are supported?

Supports IDEs such as Claude Code, Codex, Opencode, Cursor, and others.

Do I need third-party tools?

No, all functionality is integrated within the skill set.

Related skills

gemini-cli

Gemini CLI is an open-source AI agent that brings Gemini's powerful capabilities directly into the terminal.

MCP

fable-method

Fable Method: Distilling the problem-solving approach of Claude Fable 5 into a skill set that any model can execute.

Agent Skill

planning-with-files

File-based persistent planning skill, ideal for AI coding agents and long-running tasks.

Agent Skill

scientific-agent-skills

Transform any AI agent into a scientific assistant with 147 ready-to-use research skills.

Agent Skill

susi_alexa_skill

A skill that enables question-and-answer interactions between Alexa and Susi AI.

Agent Skill

claude-context

Provides code search capabilities for Claude Code, turning the entire codebase into context.

MCP