vulnetix/pix-ai-coding-assistant · skills/sast-scan/SKILL.md
sast-scan skillA
Static application security testing (SAST) for changed source files — Vulnetix''s built-in rule set plus optional Semgrep augmentation when `.semgrep` config is present. Use when reviewing a PR for code-level vulnerabilities, scanning a feature branch before merge, gating CI on critical findings, or running rule-specific checks for a known weakness class.
Latest version
mdr add vulnetix/pix-ai-coding-assistant/sast-scan@git:20260904.974b690Exact content
mdr add vulnetix/pix-ai-coding-assistant/sast-scan@sha256:4b65561bc94fb78fBadge
[](https://markdownregistry.com/a/art_tw3r64mms6dfhjad)
0 badge views in 30 days
Versions
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3711 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
vulnetix/pix-ai-coding-assistant · 9 stars · license Apache-2.0 · pushed 2026-09-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_tw3r64mms6dfhjad GET https://markdownregistry.com/api/v1/resolve?ref=vulnetix/pix-ai-coding-assistant/sast-scan GET https://markdownregistry.com/api/v1/blob/4b65561bc94fb78fdf612f4dd9356480bbe98e76ead0b33aba49fe6a61193b7f