offat-ai

Plugin offat-ai from marketplace offat-ai in OWASP/OFFAT. Commands read from the repo's manifest — 8 days ago.

Skills (3)

• offat-graybox

  Run the OFFAT-AI gray-box pipeline over a codebase - map the HTTP endpoint attack surface from source with graft, fuse it with the SAST hunters, and AI-analyze only the findings reachable from a mapped endpoint (batched, cached, model-tiered). No live traffic. Use when the user wants a combined sour

• offat-triage

  Re-triage an existing OFFAT-AI findings file (report.json / findings.jsonl, or any JSON/JSONL list of findings) with the shared AI/heuristic triager to add or refresh verdicts, CVSS and remediation. Use when the user wants to validate findings, cut false positives, or apply AI triage to results scan

• offat-whitebox

  Run the OFFAT-AI white-box (SAST) pipeline over a codebase — recon, hunt, chain, verify, report — following the security-harness workflow. Use when the user wants a static source-code security review, to "find vulnerabilities in this repo", scan for secrets/injection/insecure deserialization, or gen

Slash commands (1)

• /offat-ai:offat-scan

  Run an OFFAT-AI security scan - white-box SAST over a codebase, gray-box source-plus-surface analysis, the full Bundle platform pipeline against a live API, or re-triage an existing findings file.

Subagents (1)

• offat-verifier

  Adversarially verify OFFAT-AI security findings. Use to validate candidate vulnerabilities (from the DAST engine or white-box pipeline), refute false positives, assign CWE/CVSS, and write concrete, code- or request-level remediation — the human-in-the-loop counterpart to the automated triager.

Similar plugins