glog

Scan codebases, validate SARIF results, and generate remediation reports.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/glogai/glog-skills --skill glog
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: glog
Source: https://github.com/glogai/glog-skills/tree/main/glog
Command: npx skills add https://github.com/glogai/glog-skills --skill glog

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the Glog.AI scan, SARIF validation, and focused remediation workflow so teams surface actionable findings without altering unrelated code.

Core Features & Use Cases

  • Automated scanning with SARIF validation for the current repository to surface genuine findings.
  • Generates a .glog remediation report, cleans temporary artifacts, and preserves SARIF output.
  • Supports remediation strategies (local or pr-per-finding) and optional language targeting for the scan.

Quick Start

Run the glog skill to perform a scan and generate remediation guidance for the current repository.

Frequently Asked Questions about glog

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate codebase scanning and SARIF validation for security findings?

To automate codebase scanning and SARIF validation, run the Glog workflow which generates a .glog remediation report and preserves the glog-scan.sarif output in your project root without applying unrelated refactors.

What is focused remediation in code quality automation?

Focused remediation applies targeted fixes to genuine security findings while avoiding unrelated refactors. It supports local or pr-per-finding strategies to ensure code quality improvements remain isolated from unrelated code.

Do I need environment tokens to run a Glog scan?

Yes, running a Glog scan requires environment setup and specific tokens including GLOG_CLIENT, GLOG_ENV, GITHUB_TOKEN, and GITHUB_USER to authenticate and execute the automated codebase scanning workflow successfully.

What files does the Glog workflow output to the project root?

The Glog workflow outputs .glog/glog-scan.sarif and .glog/glog-remediation-report.md to the project root. It cleans temporary artifacts while preserving these SARIF results and remediation guidance files.

Can I target a specific programming language during a repository scan?

Yes, the automated repository scan supports optional language targeting to focus the SARIF validation and remediation strategy on specific programming languages within your codebase.