Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
This skill provides AI agents with a systematic framework for Static Application Security Testing (SAST). It enables the analysis of source code across web, API, authentication, mobile, and logic layers to identify security bugs.
By utilizing source-to-sink taint tracking and class-specific detection heuristics, it helps application security engineers produce actionable findings that include severity ratings and precise code locations.
WHO IT'S FOR
Application Security Engineers
automate vulnerability detection across 34 classes
Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
Target source-code file or directory to substitute for <target file or directory>
Language and framework, if known
Use the llm-sast-scanner skill to perform a quick security scan of <target file or directory>. Determine the language and framework, trace relevant attacker-controlled sources to potential sinks, verify each finding to reduce false positives, and report severity, affected file and line number, and remediation guidance. Treat <target file or directory> as a placeholder for the code I provide.
Claude
Codex