Security Scanning Security Sast

This is a comprehensive SAST toolkit that brings together industry-standard security scanners like Bandit, Semgrep, ESLint Security, and CodeQL for finding vulnerabilities before they ship. It covers the usual suspects: SQL injection, XSS, hardcoded secrets, path traversal, and insecure deserialization across Python, JavaScript, Java, Ruby, PHP, Go, and Rust. The real value is in the custom Semgrep rule examples and framework-specific configurations for Django, Flask, Express, and Spring Boot. Use it during code review or in CI pipelines when you need static analysis that catches common security bugs. The documentation includes both vulnerable and secure code patterns, which makes triage and remediation faster than just getting a list of line numbers.

skills.sh installs: 360
GitHub stars: 39.4K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill security-scanning-security-sast --agent claude-code

Installs into .claude/skills of the current project.

Files

SAST Security Plugin

Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns.

Detailed Guide

Read the detailed guide before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.

Use this skill when

Use for code review security analysis, injection vulnerabilities, hardcoded secrets, framework-specific patterns, custom security policy enforcement, pre-deployment validation, legacy code assessment, and compliance (OWASP, PCI-DSS, SOC2).

Specialized tools: Use security-secrets.md for advanced credential scanning, security-owasp.md for Top 10 mapping, security-api.md for REST/GraphQL endpoints.