Open source alternatives to sast-configuration
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Getgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Getopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Getandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Getmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Getod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Getgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database
About sast-configuration
sast-configuration
Configure Static Application Security Testing
sast-configuration is an agent skill from the wshobson/agents collection for setting up static application security testing (SAST) tools that find vulnerabilities in application code without running it. It covers Semgrep, SonarQube and CodeQL, and it explains how to configure them across several programming languages. The skill's uses include setting up SAST scanning in CI/CD pipelines so every change is checked, creating custom security rules that match the patterns of your own codebase, configuring quality gates and compliance policies that decide when a build should fail, optimizing scan speed, and reducing false positives so developers keep trusting the results. It also covers combining more than one SAST tool for defense in depth, since each tool catches some issues the others miss. The first section is a Semgrep configuration guide, covering rule files and how to write a custom rule. A static scanner is only useful when its findings are triaged, so the skill's guidance includes making rules specific enough that teams act on what they see. The agent writes the configuration files and rules for a project, and the security team decides which findings block a release. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 10.5K installs and passing results from three security audits at the time of the scan.
- Price
- Free
- Made by
- wshobson
- Category
- AI Skills
- Website
- github.com/wshobson/agents/sast-configuration