Scan source code for security flaws and produce markdown findings.
npx skills add https://github.com/simplerick0/com.ackhax.configs --skill sast
Please help me install this Agent Skill. Skill: sast Source: https://github.com/simplerick0/com.ackhax.configs/tree/main/skills/security/sast Command: npx skills add https://github.com/simplerick0/com.ackhax.configs --skill sast
SAST helps teams identify security flaws and insecure patterns in source code without executing it, reducing risk during development.
Run a static code review on your project and review the generated findings report.
High-intent search queries and answers about installing and using this skill.
Run a static security analysis to scan your repository and identify hardcoded credentials, API keys, and tokens. This process reviews code without execution, producing a structured markdown report with actionable remediation guidance.
Scanning source code for insecure patterns and configuration flaws involves analyzing code and project configurations without execution. This method flags injection vectors, insecure deserialization, and misconfigurations, generating a structured markdown report of findings.
Yes, you can use static analysis to check dependency manifests for vulnerable or outdated packages. This process detects dependency risks, including typosquatting, by scanning manifests and build configurations to produce a structured findings report.
Static code review works across different programming languages to identify security flaws. By analyzing code, dependency manifests, and project configurations, it surfaces insecure patterns and generates actionable remediation guidance in a structured markdown format.
A static code review can identify hardcoded secrets, injection vectors, insecure deserialization, misconfigurations, and vulnerable dependencies without executing the code. It scans code and manifests to produce a structured markdown report of these findings.
utsavthakurAudit codebases with static analysis and generate structured risk reports.
eleva-labsPlan security audits with checklists for dependency scanning and secret detection.
iani-kuliBlock hardcoded credentials and API keys during git commit workflows.
Ed1s0nZAnalyze Android and iOS applications for security vulnerabilities using static and dynamic techniques.
