skills.rest
philo-groves
philo-grovesCOMMUNITY
Explore all skills by this author →
GitHub

maxtac-sast-surface-triage

Automate static surface triage of source code or decompiler output to map trust boundaries and route auditors.

12|Updated Jun 1, 2026
Search Tags:#static analysis#security analysis#MaxTAC#source code triage#auditor routing
One-click install
npx skills add https://github.com/philo-groves/MaxTAC --skill maxtac-sast-surface-triage
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: maxtac-sast-surface-triage
Source: https://github.com/philo-groves/MaxTAC/tree/main/plugins/maxtac-source/skills/maxtac-sast-surface-triage
Command: npx skills add https://github.com/philo-groves/MaxTAC --skill maxtac-sast-surface-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires maxtac-core, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of static surface triage for source code or decompiler output, helping to identify trust boundaries, dangerous code areas, and entrypoints for further analysis.

Core Features & Use Cases

  • Static Surface Triage: Maps trust boundaries, dangerous code areas, entrypoints, sinks, invariants, and route hypotheses to auditors or OpenGrep.
  • Use Case: When analyzing a new software project, use this Skill to quickly identify potential security issues and direct further analysis to the most relevant areas.

Quick Start

Use the maxtac-sast-surface-triage skill to triage the source code of a project with the command 'maxtac-sast-surface-triage --target "project-source-code"'.

Frequently Asked Questions about maxtac-sast-surface-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map trust boundaries during static analysis of source code?▼

Static analysis trust boundary mapping is automated by triaging source code or decompiler output to identify dangerous code areas, entrypoints, and sinks for targeted security review.

What is the best way to route auditors for security analysis of a new software project?▼

Routing auditors for security analysis is handled by mapping static surface triage results—entrypoints, sinks, and invariants—and directing targeted auditors or OpenGrep to relevant code areas.

Can I use Python scripts to triage decompiler output for security vulnerabilities?▼

Yes, Python scripts process decompiler output to map security-related elements like trust boundaries and dangerous areas, requiring MaxTAC Core to execute the triage workflow.

Does static surface triage work with OpenGrep for source code analysis?▼

Static surface triage integrates with OpenGrep by mapping trust boundaries and route hypotheses, directing the analysis tool to identified sinks and entrypoints for further scanning.

Do I need MaxTAC Core to identify entrypoints and sinks in source code?▼

Yes, MaxTAC Core is a required dependency to run the Python scripts that map security elements like entrypoints, sinks, and invariants during static surface triage.

When do I need static surface triage for source code security?▼

Static surface triage is needed when analyzing a new software project to quickly identify potential security issues and direct further analysis to the most relevant dangerous code areas.

Related Skills

Explore More Software Engineering Skills→
philo-grovesphilo-groves
12

maxtac-core-subagents

Run goal-bounded auditor and debate subagents within the MaxTAC framework.

Community
Advanced
automateyournetworkautomateyournetwork
627

pyats-security

Audit network device security across management plane, AAA, ACLs, CoPP, routing protocols, and encryption.

Community
Advanced
philo-grovesphilo-groves
12

maxtac-supply-chain-triage

Automate initial triage of supply-chain vulnerabilities from source code to shipped artifacts.

Community
Advanced
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced