Detect security vulnerabilities in source code via IPA-aligned static analysis.
npx skills add https://github.com/seiei-sogen/tumigi --skill ipa-security-check
Please help me install this Agent Skill. Skill: ipa-security-check Source: https://github.com/seiei-sogen/tumigi/tree/main/skills/ipa-security-check Command: npx skills add https://github.com/seiei-sogen/tumigi --skill ipa-security-check
This Skill automates the detection of security vulnerabilities in source code by performing static analysis against five official IPA (Information-Technology Promotion Agency) documents. It eliminates manual security review overhead by identifying issues such as SQL injection, XSS, CSRF, path traversal, and session management flaws while automatically providing exact citations to the original IPA documentation for every finding.
Run the IPA security check on your project directory to receive a comprehensive vulnerability report with official IPA citations and remediation guidance.
High-intent search queries and answers about installing and using this skill.
Static analysis scanning detects vulnerabilities like SQL injection and XSS in PHP, Java, Python, Ruby, JavaScript, C#, and Go files, generating a report with exact IPA document citations for every finding.
Static analysis for IPA compliance inspects source code against five official IPA documents, including the Secure Web Site Development guidelines and Security Implementation Checklist, to identify security flaws automatically.
False-positive review and triage state persistence are supported using snippet hashing, allowing you to mark findings as 'not an issue,' 'deferred,' or 'to be addressed' directly in the generated Markdown report across scan iterations.
The security scanner works with PHP, Java, Python, Ruby, JavaScript, TypeScript, C#, and Go source files, alongside configuration files, using regex-based detection rules and context-aware filtering for compliance auditing.
IPA guideline checks detect SQL injection, cross-site scripting (XSS), CSRF, path traversal, and session management flaws by scanning code against IPA secure coding standards with exact documentation references.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
apacheImport security scanner findings into Magpie for operator-reviewed triage.
elizaOSRun CodeQL and Semgrep scans and parse SARIF results.
AnsteorraPerform static and dynamic security audits on the KMP application.
