Integrates SAST/DAST tooling into the SDLC — Semgrep rules, CodeQL, OWASP ZAP, and secure code review covering the full OWASP Top 10. Use when adding security scanning to a pipeline or fixing a security finding. Trigger with "set up SAST scanning", "fix this security finding".
By jeremylongshore
How to install
Skill (folder)A Skill is a folder with a SKILL.md file that gives Claude extra instructions for a task.
Claude Code (project or global):
# per-project mkdir -p .claude/skills/sast # ...or for all projects mkdir -p ~/.claude/skills/sast # copy SKILL.md and any supporting files into that folder
Claude.ai / Claude Desktop:
Customize → Skills → “+” → Browse skills → Install. (Installed skills are view-only; download a copy to customise.)
Claude auto-detects skills in that folder — no restart needed.
Exact steps can vary per project — always double-check the original source. New to this? Read the full install guide →
Source
More in Security
View all →PDF Tools
Read, extract, merge, split, rotate, watermark, encrypt, and OCR PDF files — including filling PDF forms and extracting tables
Doc Coauthoring
Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content. This workflow helps users efficiently transfer context, refine content through iteratio…
Anthropic Skills
Official collection of Anthropic-built skills for Claude Code. Bundles document skills (pdf, pptx, xlsx, docx), memory maintenance (consolidate-memory), skill authoring (skill-creator), and scheduling — everything you need for day-to-day productivity.
Google Drive Server
Search, read, and manage files in Google Drive with OAuth authentication