sast-investigator

Triage SAST findings by performing source-to-sink data flow analysis across files to distinguish real vulnerabilities from false positives. This skill traces data from source input to dangerous operations and produces evidence-backed classifications with file paths and code snippets.

Source-to-sink analysis in static code review traces untrusted data flow from entry points to dangerous operations. This skill applies it to validate SAST findings, determining if a vulnerability is exploitable by verifying the complete execution path.

Yes, you can triage Semgrep output along with other SAST tool results. The skill processes these outputs to prioritize remediation by validating findings and documenting decisions with evidence like file paths, line numbers, and code rationale.

Classify false positives in static analysis by tracing data flow paths to see if sanitization blocks the vulnerability. This skill evaluates SAST findings and categorizes them as true positives, false positives, or uncertain based on rigorous source-to-sink validation.

Yes, you need workspace code access to validate SAST findings effectively. The skill requires direct access to source code and tooling to trace data flow, verify the execution context, and document evidence-backed decisions for each finding.

SAST tools report many false positives during code review because they lack contextual execution path validation. This skill resolves this by performing rigorous source-to-sink data flow analysis to distinguish actual vulnerabilities from benign code patterns.