sast

What problem does it solve?

This Skill addresses the need for in-depth code security analysis that goes beyond simple pattern matching, identifying subtle vulnerabilities like data flow issues and unsafe deserialization.

Core Features & Use Cases

• Unified Static Analysis: Wraps multiple tools (ESLint, Semgrep, Bandit, Clippy, etc.) for comprehensive code scanning.
• Language Agnostic: Detects project language and runs appropriate analyzers.
• Vulnerability Detection: Catches complex security flaws missed by basic linters.
• Use Case: Before deploying a new authentication module, run SAST to ensure no subtle injection vulnerabilities or insecure data handling practices are present.

Quick Start

Run a static analysis scan on the current project to identify security vulnerabilities.