Checkmarx
Official@Checkmarx
Checkmarx provides application security skills for SAST scanning, SCA dependency auditing, and cx CLI setup with automated vulnerability remediation.
Agent Skills by Checkmarx
Showing 7 vetted skills indexed across 1 GitHub repositories.
Checkmarxcheckmarx-devassist-asca
Scans source code files with Checkmarx ASCA SAST and remediates findings via the Checkmarx MCP.
Checkmarxcheckmarx-devassist-sca
Scans dependency manifests for vulnerable or malicious open-source packages and remediates findings via Checkmarx MCP.
Checkmarxcheckmarx-cli-setup
Installs, upgrades, and authenticates the Checkmarx cx CLI for security scanning.
Checkmarxcx-cli-setup
Installs, configures, and authenticates the Checkmarx cx CLI for security scanning.
Checkmarxcx-devassist-asca
Scans source code files with Checkmarx ASCA SAST and remediates findings via the Checkmarx MCP tool.
Checkmarxcx-install-wiring
Installs Checkmarx hooks and rules for Cursor CLI, then configures cx CLI authentication.
Checkmarxcx-devassist-sca
Scans dependency manifests with Checkmarx SCA and remediates vulnerable packages via MCP.
Frequently Asked Questions About Checkmarx
FAQPage SchemaWhat tasks can I perform using Checkmarx's skills?▼
You can run ASCA SAST scans on source code files to detect code vulnerabilities, run SCA scans on dependency manifests and lockfiles to find vulnerable or malicious open-source packages, remediate findings via the Checkmarx MCP integration, and install, configure, and authenticate the cx CLI.
Who should use Checkmarx DevAssist skills?▼
Developers and application security engineers who need to scan source files (.py, .js, .java, .go, .ts) or audit dependency manifests (package.json, requirements.txt, go.mod, pom.xml, build.gradle) for security issues directly from their development environment, including Cursor CLI users.
How do I install and authenticate the Checkmarx cx CLI?▼
Invoke /cx-cli-setup to install, configure, and authenticate the cx CLI when it is missing, outdated, or unauthenticated. Authentication supports either an API key or browser-based OAuth sign-in. First-time users can run /cx-install-wiring to wire hooks and rules before continuing into CLI setup.
When should I use cx-devassist-asca versus cx-devassist-sca?▼
Use cx-devassist-asca to scan and fix individual source code files for vulnerabilities via SAST. Use cx-devassist-sca when auditing dependency manifests or lockfiles for vulnerable or malicious open-source packages. Both remediate findings through the Checkmarx MCP integration.
What are the prerequisites for running Checkmarx DevAssist skills?▼
You need the Checkmarx cx CLI installed and authenticated via API key or browser OAuth sign-in, which the cx-cli-setup skill handles. First-time setup uses cx-install-wiring to wire hooks and rules, and remediation requires access to the Checkmarx MCP integration.