Automate whitebox security reviews across code, configurations, and CI pipelines.
npx skills add https://github.com/ace3/skills --skill security-sast
Please help me install this Agent Skill. Skill: security-sast Source: https://github.com/ace3/skills/tree/main/skills/security-sast Command: npx skills add https://github.com/ace3/skills --skill security-sast
Whitebox security review of code, configurations, and pipelines to identify vulnerabilities and reduce risk before release.
Run a baseline SAST workflow on your repository using the built-in references.
High-intent search queries and answers about installing and using this skill.
Automate SAST by orchestrating whitebox security reviews across code, configs, containers, and CI pipelines. It identifies vulnerabilities and reduces risk before release using evidence-backed findings and non-destructive verification workflows.
Yes, SAST scanning applies across JavaScript/TypeScript/Next.js/Node.js stacks and Go services. It also covers containers, IaC, and supply-chain risk contexts to ensure comprehensive codebase and deployment pipeline coverage.
Prioritize vulnerabilities using CVSS-style scoring and risk framing applied during the static scan. The process generates evidence-backed findings and remediation handoffs to streamline release hardening efforts.
Threat modeling integrates directly into the code review process to identify vulnerabilities and plan remediation. It operates alongside evidence collection and risk framing to reduce deployment pipeline risk before release.
Verify SAST findings using non-destructive verification workflows built into the baseline review process. This approach applies quality gates to ensure evidence-backed findings without disrupting your active configurations.
PolicyEngineEnforce PolicyEngine development standards and CI checks across repositories.
avav25Identify security risks in code, dependencies, and configurations.
jlawsRun STRIDE threat modeling and SAST vulnerability scans on codebases.
binan-makerAggregate security scanner results into a prioritized summary with per-scanner status.
