What problem does it solve? It detects SAST security vulnerabilities in source code files (.py, .js, .java, .go, .ts, and similar) using the Checkmarx ASCA engine and applies deterministic, MCP-generated fixes instead of ad-hoc manual edits. ## Core Features & Use Cases - On-demand ASCA scanning: Run cx scan asca on a source file and report each finding with rule name, severity, line, description, and remediation advice. - MCP-only remediation: Every fix comes from the mcp__plugin-cx-devassist-Checkmarx__codeRemediation tool; if the MCP is unavailable, the flow stops and recovers the connection rather than improvising a fix. - Scoped re-scan and suppression: After fixing, re-scan the file, remediate only findings tied to your own changes, and optionally suppress confirmed false positives with cx ignore-vulnerability. - Use Case: A hook denies a Write because of a SQL injection finding in app.py; the skill skips re-scanning, calls the remediation MCP, applies the fix at the problematic line, re-scans, and reports a structured remediation summary. ## Quick Start Ask the assistant to scan a source file for security vulnerabilities, for example: scan app.py for security issues and fix any findings.
