claudecodex

security-sast

Whitebox/static security workflows for source code, JavaScript, TypeScript, Next.js, Node.js, Fastify, config, dependencies, supply-chain risk, containers, IaC, threat modeling, scanner-output review, finding normalization, and hardening gates.

0 on GitHubby ace3v0.1.1MITupdated 5 months agosecurity
/

Plugin security-sast from marketplace ace3-skills in ace3/skills. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (1)

  • security-sast

    Whitebox/static application security testing for source code, config, dependencies, containers, IaC, CI, threat modeling, scanner-output review, finding normalization, vulnerability reports, CVSS scoring, remediation plans, fix queue handoffs, and release hardening. Use for SAST, Semgrep, CodeQL, go

View source on GitHub

More from ace3/skills

All 21 plugins →

Backend implementation for server, API, data, queue, auth, idempotency, and migration work after an approved plan.

1 skill

0

Task-link delivery workflow for turning a Plane or Notion task link into a strict execution contract, then routing through product, engineering, implementation, QA, security, monitoring, or deployment skills.

1 skill

0

deployment-ops

claudecodex

Deployment workflows for release readiness, GCP MIG rollouts, Docker service ops, Ansible Runner, Semaphore UI/API, rollback, and verification.

1 skill

0

dev-orchestrator

claudecodex

Thin router for multi-role software delivery across research, product, engineering, backend, frontend, granular QA, security, monitoring, deployment, Plane, drawing, and roast.

1 skill

0

diagnose

claudecodex

Disciplined diagnosis for hard bugs, failing tests, broken runtime behavior, flaky failures, unclear root causes, and performance regressions.

1 skill

0

drawing

claudecodex

Diagram creation router for Mermaid and Excalidraw, covering Markdown-native diagrams and visual .excalidraw artifacts.

1 skill

0

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Design fluency for frontend development. 1 skill with 24 commands (/impeccable polish, /impeccable audit, /impeccable critique, etc.) and curated anti-pattern detection.

1 skill · 4 agents · hooks

pbakaus/impeccable 109,099

MetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint

13 skills · 1 command · 1 agent · hooks

ruvnet/ruflo 81,589

5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.

5 skills · 16 commands · 4 agents · hooks

Imbad0202/academic-research-skills 56,698

Maintain security-sast?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins21 plugins