utkusen/sast-skills

This collection of agent skills teaches an AI coding assistant to perform static application security testing across 15 vulnerability classes—SQL injection, cross-site scripting, remote code execution, server-side request forgery, template injection, XML external entities, path traversal, insecure file upload, hardcoded secrets, JWT flaws, IDOR, missing authentication, GraphQL injection, and business logic vulnerabilities. It helps application security engineers, devsecops teams, and security-conscious developers catch vulnerabilities earlier without leaving the development environment.