skills.rest
act70255
act70255COMMUNITY
Explore all skills by this author →
GitHub

security-scanning-security-sast

Perform static application security testing to detect code vulnerabilities across multiple languages.

Updated Mar 11, 2026
Search Tags:#security scanning#SAST#application security#code vulnerability#static application security testing
One-click install
npx skills add https://github.com/act70255/SkillsBundle --skill security-scanning-security-sast-act70255
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanning-security-sast
Source: https://github.com/act70255/SkillsBundle/tree/main/testing/skills/security-scanning-security-sast
Command: npx skills add https://github.com/act70255/SkillsBundle --skill security-scanning-security-sast-act70255

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bandit, semgrep, eslint, sonarqube, codeql, pmd, spotbugs, brakeman, gosec, cargo-clippy, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs Static Application Security Testing (SAST) to identify code vulnerabilities in multiple programming languages and frameworks.

Core Features & Use Cases

  • Multi-language Support: Analyzes code vulnerabilities in Python, JavaScript/TypeScript, Java, Ruby, PHP, Go, Rust.
  • Tool Integration: Utilizes Bandit, Semgrep, ESLint Security, SonarQube, CodeQL, PMD, SpotBugs, Brakeman, gosec, cargo-clippy.
  • Vulnerability Patterns: Detects SQL injection, XSS, hardcoded secrets, path traversal, IDOR, CSRF, insecure deserialization.
  • Framework Analysis: Works with Django, Flask, React, Express, Spring Boot, Rails, Laravel.
  • Custom Rule Authoring: Allows development of Semgrep patterns for specific security policies.

Quick Start

Run the security-scanning-security-sast skill on your codebase to identify potential vulnerabilities.

Frequently Asked Questions about security-scanning-security-sast

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run static application security testing across multiple programming languages?▼

Yes, this security scanning approach analyzes Django, Flask, React, Express, Spring Boot, Rails, and Laravel. It detects vulnerabilities like SQL injection, XSS, hardcoded secrets, and path traversal within those framework structures.

Can I detect hardcoded secrets and SQL injection vulnerabilities in my source code?▼

Yes, vulnerability pattern detection covers hardcoded secrets, SQL injection, XSS, path traversal, IDOR, CSRF, and insecure deserialization by scanning source code across multiple languages and frameworks.

Does Semgrep support custom rule authoring for specific security policies?▼

Yes, Semgrep is utilized for custom rule authoring, allowing development of specific patterns to enforce unique security policies and detect tailored vulnerability scenarios in your codebase.

What's the best way to analyze Go and Rust code for security vulnerabilities?▼

Yes, security scanning works with Ruby on Rails and PHP Laravel by utilizing Brakeman for Rails and Semgrep for PHP, detecting vulnerabilities like SQL injection and CSRF within those frameworks.

Related Skills

Explore More Software Engineering Skills→
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
melikhanmutlumelikhanmutlu

vulnerability-scanner

Detect security vulnerabilities in code and dependencies across codebases.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced
georgekhananaevgeorgekhananaev
27

code-quality

Enforce cross-language code quality standards across TypeScript, Python, Go, and Rust.

Community
Advanced