Skip to content
store
sast-configuration

Free alternatives to sast-configuration

50 free AI Skills apps to use instead, best rated first.

Top picks

  1. B

    batch-grill-me

    Get

    batch-grill-me is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It interviews you relentlessly about a plan until you share an understanding. It maps decisions as a tree and asks every question it can answer now

  2. W

    webapp-testing

    Get

    Native Python Playwright scripts for testing local web applications with server lifecycle management. Includes with_server.py helper to automatically start and manage single or multiple servers before running automation scripts. Supports re

  3. C

    content-research-writer

    Get

    Assists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on

  4. O

    openhue

    Get

    openhue is an agent skill from the OpenClaw project, listed on skills.sh. It lets an agent control Philips Hue lights and scenes through a Hue Bridge with the OpenHue CLI: turn lights on and off, dim rooms, set scenes such as movie mode, an

  5. I

    implement

    Get

    implement is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It implements work from a spec or tickets: it fetches the ticket, works test-first at agreed seams, runs type checks and tests as it goes, reviews the re

  6. F

    frontend-design

    Get

    Distinctive, production-grade frontend interfaces that reject generic AI aesthetics through intentional design choices. Guides aesthetic direction selection (brutalist, maximalist, retro-futuristic, luxury, organic, etc.) before implementat

More AI Skills apps

See all
7
A

artifacts-builder

Suite of tools for creating elaborate

Get
8
C

canvas-design

Design beautiful visual art in .png and .pdf formats using design philosophies

Get
9
M

mcp-builder

Guide for creating high-quality MCP servers to integrate external APIs

Get
10
P

pdf

Extract text, tables, metadata, merge & annotate PDFs

Get
11
X

xlsx

Spreadsheet manipulation: formulas, charts, data transformations

Get
12
F

find-skills

Discover and install specialized agent skills from the open ecosystem

Get
13
B

brainstorming

Transform rough ideas into fully-formed designs through structured questioning

Get
14
F

finishing-a-development-branch

Guides completion of development work by presenting clear options

Get
15
S

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior

Get
16
T

test-driven-development

Use when implementing any feature or bugfix, before writing implementation code

Get
17
U

using-git-worktrees

Creates isolated git worktrees

Get
18
1

1password

Set up and use 1Password CLI for sign-in, desktop integration

Get
19
A

apple-notes

Create, view, edit, delete, search, move, or export Apple Notes

Get
20
A

apple-reminders

List, add, edit, complete, or delete Apple Reminders and reminder lists

Get
21
B

bear-notes

Create, search, and manage Bear notes via grizzly CLI

Get
22
B

blogwatcher

Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI

Get
23
B

blucli

BluOS CLI (blu) for discovery, playback, grouping, and volume

Get
24
C

camsnap

Capture frames or clips from RTSP/ONVIF cameras and local webcams

Get
25
C

clawhub

Search ClawHub for plugins by default, or skills when explicitly requested

Get
26
C

coding-agent

Delegate coding work to Codex, Claude Code, or OpenCode as background workers

Get
27
D

discord

Discord messaging workflows through OpenClaw's message tool

Get
28
E

eightctl

Control Eight Sleep pods (status, temperature, alarms, schedules)

Get
29
G

gemini

Gemini CLI one-shot prompts, summaries, generation, skills, hooks, MCP

Get
30
G

gh-issues

Fetch GitHub issues, select candidates, spawn background fix agents, open PRs

Get
31
G

gifgrep

Search GIF providers with CLI/TUI, download results, and extract stills/sheets

Get
32
G

github

GitHub CLI for issues, PRs, CI/check logs, comments, reviews, releases, repos

Get
33
G

gog

Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs

Get
34
G

goplaces

Query Google Places for text search, place details, resolve, reviews

Get
35
H

healthcheck

Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups

Get
36
H

himalaya

Himalaya CLI for IMAP/SMTP mail: list, read, search, compose, reply, forward

Get
37
I

imsg

Use the imsg CLI from OpenClaw agents for iMessage/SMS DMs, groups, replies

Get
38
M

mcporter

List, configure, authenticate, call, and inspect MCP servers/tools

Get
39
M

model-usage

Summarize CodexBar local cost logs by model for Codex or Claude

Get
40
N

nano-pdf

Edit PDFs with natural-language instructions using the nano-pdf CLI

Get
41
N

notion

Notion CLI/API for pages, Markdown content, data sources, files, comments

Get
42
O

obsidian

Work with Obsidian vaults

Get
43
O

openai-whisper

Local speech-to-text with the Whisper CLI (no API key)

Get
44
O

openai-whisper-api

OpenAI Audio Transcriptions API via curl

Get
45
O

oracle

Oracle CLI second-model review/debug/refactor/design

Get
46
O

ordercli

Foodora-only CLI for checking past orders and active order status

Get
47
P

peekaboo

Capture and automate macOS UI with the Peekaboo CLI

Get
48
S

sag

ElevenLabs text-to-speech with mac-style say UX

Get
49
S

session-logs

Search and analyze your own session logs (older/parent conversations) using jq

Get
50
S

sherpa-onnx-tts

Local text-to-speech via sherpa-onnx (offline, no cloud)

Get

About sast-configuration

S

sast-configuration

Configure Static Application Security Testing

sast-configuration is an agent skill from the wshobson/agents collection for setting up static application security testing (SAST) tools that find vulnerabilities in application code without running it. It covers Semgrep, SonarQube and CodeQL, and it explains how to configure them across several programming languages. The skill's uses include setting up SAST scanning in CI/CD pipelines so every change is checked, creating custom security rules that match the patterns of your own codebase, configuring quality gates and compliance policies that decide when a build should fail, optimizing scan speed, and reducing false positives so developers keep trusting the results. It also covers combining more than one SAST tool for defense in depth, since each tool catches some issues the others miss. The first section is a Semgrep configuration guide, covering rule files and how to write a custom rule. A static scanner is only useful when its findings are triaged, so the skill's guidance includes making rules specific enough that teams act on what they see. The agent writes the configuration files and rules for a project, and the security team decides which findings block a release. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 10.5K installs and passing results from three security audits at the time of the scan.

View sast-configurationAll AI Skills apps
Price
Free
Made by
wshobson
Category
AI Skills
Website
github.com/wshobson/agents/sast-configuration