maxtac-source-scan

Automate Git-based source code security reviews and generate MaxTAC result contracts.

12|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/philo-groves/MaxTAC --skill maxtac-source-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: maxtac-source-scan
Source: https://github.com/philo-groves/MaxTAC/tree/main/plugins/maxtac-source/skills/maxtac-source-scan
Command: npx skills add https://github.com/philo-groves/MaxTAC --skill maxtac-source-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates source code security reviews and scans, providing a streamlined process for identifying potential vulnerabilities in source code.

Core Features & Use Cases

  • Source Code Security Review: Automates the process of reviewing source code for security vulnerabilities.
  • Diff Scan: Initiates a Git-backed diff scan on a repository or scoped-path source review.
  • Deterministic Source Worklists: Generates worklists for deterministic source work.
  • Coverage Receipts: Provides coverage receipts for auditable claims.
  • Result Contracts: Generates canonical MaxTAC result-contract output for source security review.
  • Use Case: Use this Skill to review a pull request and generate a worklist of files to be reviewed. The Skill then generates coverage receipts for each file, and the results are compiled into a canonical MaxTAC result-contract.

Quick Start

Use the maxtac-source-scan skill to initiate a diff scan on the current branch of the repository.

Frequently Asked Questions about maxtac-source-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate source code security reviews for a Git repository?

You can automate source code security reviews by running a Git-backed diff scan on a repository branch, which generates a worklist of files to review and compiles results into a canonical contract. This streamlines the identification of vulnerabilities.

What is a diff scan for source code security?

A diff scan for source code security targets changes within a Git-backed repository rather than the entire codebase. It generates a deterministic source worklist of modified files for targeted vulnerability review.

How do I generate coverage receipts for a source code vulnerability scan?

To generate coverage receipts for a source code vulnerability scan, the review process creates an auditable claim for each file in the generated worklist. These receipts are then compiled into a canonical result contract for validation.

Can I scan a specific scoped path instead of a full repository branch?

Yes, you can initiate a scoped-path source review instead of a full repository diff scan. This targets specific directories or files within a Git-backed repository for vulnerability scanning and worklist generation.

Do I need Python to run a MaxTAC source code security scan?

Yes, Python is required to run a MaxTAC source code security scan. The automation relies on Python scripts for scan initialization, receipt creation, and result validation to produce the final canonical output contract.