jxscout-static-analysis

What problem does it solve?

Security teams and engineers waste significant time manually sifting through unstructured static analysis matches from jxscout when triaging code vulnerabilities and exploring application attack surfaces, leading to delayed response to high-risk findings.

Core Features & Use Cases

• Match Discovery & Filtering: List all available match kinds and query matches with granular filters (file path, value substring, seen status, file type) to focus on high-priority security findings like exposed secrets or dangerous HTML manipulation patterns.
• Triage Progress Tracking: Mark individual or bulk matches as seen or unseen to track review progress across vulnerability triage sessions, ensuring no unreviewed high-risk findings are missed.
• Use Case: A security engineer can use this skill to quickly pull all unseen secret matches from authentication-related JS files to prioritize credential exposure risks, then mark them as seen after review.

Quick Start

Use the jxscout-static-analysis skill to pull all unseen secret matches from files in the auth directory and mark them as seen after you finish reviewing each finding.