The SAST skill integrates industry-standard security tools—including Semgrep, Bandit, Trufflehog, and pip-audit—into a unified workflow for Claude Code. It automates the process of scanning for code vulnerabilities, exposed credentials, and insecure dependencies, providing developers with a normalized report and a prioritized remediation plan. Whether auditing an entire project, reviewing a pull request, or setting up a CI gate, this skill streamlines security posture management by delivering actionable fix recommendations and maintaining a baseline to track new versus existing issues.
主要功能
01Prioritized remediation plans with AI-driven fix suggestions
020 GitHub stars
03Unified severity modeling and normalized Markdown/JSON findings reports
04Support for credential scanning and dependency vulnerability (SCA) audits
05Automated baseline comparison for PR and CI delta-only scanning
06Multi-tool orchestration including Semgrep, Bandit, Trufflehog, and pip-audit
使用场景
01Conducting a full security audit of a legacy or new codebase
02Automating security reviews for Pull Requests to catch new vulnerabilities
03Scanning for accidentally committed secrets or credentials in source code