Alternatives to sast-configuration
50 AI Skills apps to use instead, best rated first.
Top picks
- W
webapp-testing
LaunchNative Python Playwright scripts for testing local web applications with server lifecycle management. Includes with_server.py helper to automatically start and manage single or multiple servers before running automation scripts. Supports re
- C
content-research-writer
LaunchAssists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on
- O
openhue
Launchopenhue is an agent skill from the OpenClaw project, listed on skills.sh. It lets an agent control Philips Hue lights and scenes through a Hue Bridge with the OpenHue CLI: turn lights on and off, dim rooms, set scenes such as movie mode, an
- B
batch-grill-me
Launchbatch-grill-me is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It interviews you relentlessly about a plan until you share an understanding. It maps decisions as a tree and asks every question it can answer now
- I
implement
Launchimplement is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It implements work from a spec or tickets: it fetches the ticket, works test-first at agreed seams, runs type checks and tests as it goes, reviews the re
- F
frontend-design
LaunchDistinctive, production-grade frontend interfaces that reject generic AI aesthetics through intentional design choices. Guides aesthetic direction selection (brutalist, maximalist, retro-futuristic, luxury, organic, etc.) before implementat
More AI Skills apps
brainstorming
Transform rough ideas into fully-formed designs through structured questioning
finishing-a-development-branch
Guides completion of development work by presenting clear options
test-driven-development
Use when implementing any feature or bugfix, before writing implementation code
About sast-configuration
sast-configuration
Configure Static Application Security Testing
sast-configuration is an agent skill from the wshobson/agents collection for setting up static application security testing (SAST) tools that find vulnerabilities in application code without running it. It covers Semgrep, SonarQube and CodeQL, and it explains how to configure them across several programming languages. The skill's uses include setting up SAST scanning in CI/CD pipelines so every change is checked, creating custom security rules that match the patterns of your own codebase, configuring quality gates and compliance policies that decide when a build should fail, optimizing scan speed, and reducing false positives so developers keep trusting the results. It also covers combining more than one SAST tool for defense in depth, since each tool catches some issues the others miss. The first section is a Semgrep configuration guide, covering rule files and how to write a custom rule. A static scanner is only useful when its findings are triaged, so the skill's guidance includes making rules specific enough that teams act on what they see. The agent writes the configuration files and rules for a project, and the security team decides which findings block a release. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 10.5K installs and passing results from three security audits at the time of the scan.
- Price
- Free
- Made by
- wshobson
- Category
- AI Skills
- Website
- github.com/wshobson/agents/sast-configuration