Last commit on April 2, 2026·Created on March 30, 2026
utkusen/sast-skills
“Scan code for security vulnerabilities.”
Combined rank
#323
across all skills
Stars
1.4k
+0.4% in last 7d
Forks
68
+1.5% in last 7d
Watchers
12
-7.7% in last 7d
Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
TL;DR
This collection of agent skills teaches an AI coding assistant to perform static application security testing across 15 vulnerability classes—SQL injection, cross-site scripting, remote code execution, server-side request forgery, template injection, XML external entities, path traversal, insecure file upload, hardcoded secrets, JWT flaws, IDOR, missing authentication, GraphQL injection, and business logic vulnerabilities. It helps application security engineers, devsecops teams, and security-conscious developers catch vulnerabilities earlier without leaving the development environment.
WHO IT'S FOR
Application Security Engineers
automate SAST scanning in CI/CD
AI Agent / Automation Builders
extend AI coding agents with security scanning
DevSecOps / Platform Teams
embed SAST into developer workflows
Security-Conscious Developers
self-audit code for vulnerabilities
Claude
Codex
Cursor
OpenCodeWant to install it?
Manual CopyRepository instructions