About

Imported from gabrielmoreira/agent-skills-mirror (mirrors/repos/Dokhacgiakhoa@Agent-skills-setup-for-AntiGravity/tests/manual-repair-test/.agent/skills/security-scanning-security-sast/SKILL.md). Install upstream with npx skills add gabrielmoreira/agent-skills-mirror --skill security-scanning-security-sast. Copyright stays with the author.

SAST Security Plugin

Name: security-scanning-security-sast
Author: gabrielmoreira

Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns.

Capabilities

Multi-language SAST: Python, JavaScript/TypeScript, Java, Ruby, PHP, Go, Rust
Tool integration: Bandit, Semgrep, ESLint Security, SonarQube, CodeQL, PMD, SpotBugs, Brakeman, gosec, cargo-clippy
Vulnerability patterns: SQL injection, XSS, hardcoded secrets, path traversal, IDOR, CSRF, insecure deserialization
Framework analysis: Django, Flask, React, Express, Spring Boot, Rails, Laravel
Custom rule authoring: Semgrep pattern development for organization-specific security policies

Use this skill when

Use for code review security analysis, injection vulnerabilities, hardcoded secrets, framework-specific patterns, custom security policy enforcement, pre-deployment validation, legacy code assessment, and compliance (OWASP, PCI-DSS, SOC2).

Specialized tools: Use security-secrets.md for advanced credential scanning, security-owasp.md for Top 10 mapping, security-api.md for REST/GraphQL endpoints.

Do not use this skill when

You only need runtime testing or penetration testing
You cannot access the source code or build outputs
The environment forbids third-party scanning tools

Instructions

Identify the languages, frameworks, and scope to scan.
Select SAST tools and configure rules for the codebase.
Run scans in CI or locally with reproducible settings.
Triage findings, prioritize by severity, and propose fixes.

Safety

Avoid uploading proprietary code to external services without approval.
Require review before enabling auto-fix or blocking releases.

SAST Tool Selection

🧠 Knowledge Modules (Fractal Skills)

1. Python: Bandit

2. JavaScript/TypeScript: ESLint Security

3. Multi-Language: Semgrep

4. Other Language Tools

5. SQL Injection

6. Cross-Site Scripting (XSS)

7. Hardcoded Secrets

8. Path Traversal

9. Insecure Deserialization

10. Command Injection

11. Insecure Random

12. Django

13. Flask

14. Express.js

15. GitHub Actions

16. GitLab CI

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/gabrielmoreira-agent-skills-mirror-security-scanning-sec-8f585c/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

gabrielmoreira-agent-skills-mirror-security-scanning-sec-8f585c.ocm.jsonjson

{
  "ocm": "1",
  "id": "gabrielmoreira-agent-skills-mirror-security-scanning-sec-8f585c",
  "kind": "skill",
  "name": "security-scanning-security-sast",
  "description": "Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks",
  "publisher": "gabrielmoreira",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding"
    ],
    "tags": [
      "skill-md",
      "sast",
      "static",
      "analysis",
      "code",
      "security",
      "vulnerability",
      "scanning",
      "bandit",
      "semgrep"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/gabrielmoreira/agent-skills-mirror",
      "path": "mirrors/repos/Dokhacgiakhoa@Agent-skills-setup-for-AntiGravity/tests/manual-repair-test/.agent/skills/security-scanning-security-sast/SKILL.md",
      "ref": "d5c793801e2fc9c29aa3531805809b3460b19d09",
      "url": "https://github.com/gabrielmoreira/agent-skills-mirror/blob/d5c793801e2fc9c29aa3531805809b3460b19d09/mirrors/repos/Dokhacgiakhoa@Agent-skills-setup-for-AntiGravity/tests/manual-repair-test/.agent/skills/security-scanning-security-sast/SKILL.md",
      "key": "gabrielmoreira/agent-skills-mirror/mirrors/repos/Dokhacgiakhoa@Agent-skills-setup-for-AntiGravity/tests/manual-repair-test/.agent/skills/security-scanning-security-sast/SKILL.md"
    }
  },
  "instructions": "# SAST Security Plugin\n\nStatic Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns.\n\n## Capabilities\n\n- **Multi-language SAST**: Python, JavaScript/TypeScript, Java, Ruby, PHP, Go, Rust\n- **Tool integration**: Bandit, Semgrep, ESLint Security, SonarQube, CodeQL, PMD, SpotBugs, Brakeman, gosec, cargo-clippy\n- **Vulnerability patterns**: SQL injection, XSS, hardcoded secrets, path traversal, IDOR, CSRF, insecure deserialization\n- **Framework analysis**: Django, Flask, React, Express, Spring Boot, Rails, L",
  "cost": {
    "context_tokens": 696
  }
}

Fetch it by URL: GET /api/v1/registry/gabrielmoreira-agent-skills-mirror-security-scanning-sec-8f585c/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.