sast-skills

Collection of agent skills to find vulnerabilities inside your web/mobile apps.

npx skills add utkusen/sast-skills -g -y

16 skills

Sast Analysis

Perform codebase analysis and architecture mapping as the first phase of a security...

utkusen/sast-skills1.4k

Sast Businesslogic

Detect business logic vulnerabilities in a codebase using a three-phase approach...

utkusen/sast-skills1.4k

Sast Fileupload

Detect insecure file upload vulnerabilities in a codebase using a three-phase approach...

utkusen/sast-skills1.4k

Sast Graphql

Detect GraphQL injection vulnerabilities in a codebase using a three-phase approach...

utkusen/sast-skills1.4k

Sast Hardcodedsecrets

Detect hardcoded sensitive data (API keys, access tokens, private keys, passwords...

utkusen/sast-skills1.4k

Sast Idor

Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a...

utkusen/sast-skills1.4k

Sast Jwt

Detect insecure JWT (JSON Web Token) implementations in a codebase using a two-phase...

utkusen/sast-skills1.4k

Sast Missingauth

Detect missing authentication and broken function-level authorization vulnerabilities...

utkusen/sast-skills1.4k

Sast Pathtraversal

Detect path traversal vulnerabilities in a codebase using a three-phase approach: recon...

utkusen/sast-skills1.4k

Sast Rce

Detect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase...

utkusen/sast-skills1.4k

Sast Report

Consolidate all SAST vulnerability results from the sast/ folder into a single final...

utkusen/sast-skills1.4k

Sast Sqli

Detect SQL injection vulnerabilities in a codebase using a three-phase approach: recon...

utkusen/sast-skills1.4k

Sast Ssrf

Detect Server-Side Request Forgery (SSRF) vulnerabilities in a codebase using a...

utkusen/sast-skills1.4k

Sast Ssti

Detect Server-Side Template Injection (SSTI) vulnerabilities in a codebase using a...

utkusen/sast-skills1.4k

Sast Xss

Detect Cross-Site Scripting (XSS) vulnerabilities in a codebase using a three-phase...

utkusen/sast-skills1.4k

Sast Xxe

Detect XML External Entity (XXE) vulnerabilities in a codebase using a three-phase...

utkusen/sast-skills1.4k