sast-businesslogic

What problem does it solve?

The skill helps security teams identify business logic vulnerabilities in a codebase by orchestrating a three-phase assessment: threat modeling to generate attack scenarios, batched verification to test exploitability in parallel, and a merge step to consolidate results.

Core Features & Use Cases

• Threat modeling: derive domain understanding, map features and potential attack vectors; produces sast/businesslogic-threats.md.
• Batched verification: run parallel subagents to validate exploitability in batches; outputs per batch and final results.
• Merge and reporting: combine findings into a single sast/businesslogic-results.md with risk prioritization and remediation guidance.

Quick Start

Initiate a business logic assessment to generate threats, run batched verification, and review the merged results in sast/businesslogic-results.md.