security-sast
Runs static application security testing for code vulnerabilities across several languages and frameworks.
- Kind
- Prompt
- Works with
- Claude Code, Codex
- Source
- wshobson/agents @ 0874a27b17a2
- Path
- plugins/security-scanning/commands/security-sast.md
- License
- MIT
- Jobs
- Review, Guardrails
InstallInstall it from a plugin marketplace.
/plugin install security-scanning@claude-code-workflows
# SAST Security Plugin Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns. ## Capabilities - **Multi-language SAST**: Python, JavaScript/TypeScript, Java, Ruby, PHP, Go, Rust - **Tool integration**: Bandit, Semgrep, ESLint Security, SonarQube, CodeQL, PMD, SpotBugs, Brakeman, gosec, cargo-clippy - **Vulnerability patterns**: SQL injection, XSS, hardcoded secrets, path traversal, IDOR, CSRF, insecure deserialization - **Framework analysis**: Django, Flask, React, Express, Spring Boot, Rails, Laravel - **Custom rule authoring**: Semgrep pattern development for organization-specific security policies ## When to Use This Tool Use for code review security analysis, injection vulnerabilities, hardcoded secrets, framework-specific patterns, custom security policy enforcement, pre-deployment validation, legacy code assessment, and compliance (OWASP, PCI-DSS, SOC2). **Specialized tools**: Use `security-secrets.md` for advanced credential scanning, `security-owasp.md` for Top 10 mapping, `security-api.md` for REST/GraphQL endpoints. ## SAST Tool Selection ### Python: Bandit ```bash …