What problem does it solve? Source code files often contain security vulnerabilities like unsafe subprocess calls or injection flaws that go unnoticed until late in development. This Skill runs a Checkmarx ASCA SAST scan on individual source files and remediates confirmed findings through the Checkmarx MCP, so vulnerabilities are detected and fixed directly in the AI-assisted workflow. ## Core Features & Use Cases - On-Demand SAST Scanning: Runs cx scan asca on source files (.py, .js, .java, .go, .ts, etc.) and reports each finding with rule name, severity, line, description, and remediation advice. - MCP-Driven Remediation: Applies fixes exclusively through the mcp__Checkmarx__codeRemediation tool, then re-scans to verify the fix and distinguish in-scope findings from pre-existing ones. - Fail-Closed Recovery: If the Checkmarx MCP is unavailable, the Skill stops rather than improvising a manual fix, and guides authentication validation and MCP reconnection. - Use Case: A developer asks the assistant to scan app.py for security issues; the Skill reports a High-severity unsafe shell=True subprocess call on line 38, remediates it via the Checkmarx MCP, re-scans, and outputs a structured remediation summary. ## Quick Start Ask the assistant to scan a source code file such as app.py for security vulnerabilities and remediate any findings.
