{"repo":"utkusen/sast-skills","free":true,"listed":false,"github":"https://github.com/utkusen/sast-skills","clone":"git clone https://github.com/utkusen/sast-skills.git","description":"Collection of agent skills that turn your AI coder into a SAST scanner","language":null,"stars":1279,"topics":["ai-security","claude","claude-code","sast"],"license":"MIT","category":"security-tools","readme_excerpt":"LLM SAST Skills A collection of agent skills that turn your LLM coding assistant into a fully functional SAST scanner to find vulnerabilities in your codebase. Works natively with Claude Code, Codex, Opencode, Cursor and any other assistant that supports agent skills. No third-party tools required. Claude Code with Opus model is recommended. But if the cost is a concern, use any IDE and model you trust. How It Works CLAUDE.md (for Claude Code) or AGENTS.md (for Opencode and other IDEs) orchestrates the entire assessment workflow automatically. The assessment runs in three steps: 1. Codebase Analysis -- The sast-analysis skill maps the technology stack, architecture, entry points, data flows, and trust boundaries. It writes its findings to sast/architecture.md . 2. Vulnerability Detection (parallel) -- All 13 vulnerability detection skills run in parallel as subagents. Each skill follows a two-phase approach: first a recon/discovery phase to find candidate sections, then a verification phase to confirm exploitability. Results are written to sast/ -results.md . 3. Report Generation -- The sast-report skill consolidates all findings into a single sast/final-report.md , ranked by severity with full remediation guidance and dynamic test instructions. What It Detects Skill Vulnerability Class --- --- sast-analysis Codebase reconnaissance, architecture mapping, threat modeling sast-sqli SQL Injection sast-graphql GraphQL injection sast-xss Cross-Site Scripting (XSS) sast-rce Remote ","default_branch":null,"files":null,"tree":[],"storefront":"/r/utkusen","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/utkusen/sast-skills/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}