sast agents

agentgg-dev/agentgg

Agent

Distills a past security report into a reusable agentgg agent that catches the same anti-pattern if it recurs in this codebase.

agentgg-dev/agentgg

Agent

Picks folders a SAST run doesn't need to scan (test directories, fixtures, docs, generated code, vendored deps) so the scan skips them.

agentgg-dev/agentgg

Agent

Fast, high-level survey that orients the security agents — what the project is, its stack, auth model, integrations, and notable areas.

snyk/snyk-ls

Agent Cursor

Implementation specialist that writes production code using TDD and commits changes. Use proactively when implementing features, fixing bugs, or writing code for a confirmed plan. Delegates to planner when requirements are unclear or need updating. Hands over to qa when implementation is complete.

snyk/snyk-ls

Agent Cursor

Planning specialist that creates structured implementation plans for Jira issues. Use proactively when starting a new task, beginning work on a Jira issue, or when asked to plan a feature. Creates the plan and hands over to the implementation agent.

snyk/snyk-ls

Agent Cursor

QA specialist that deeply analyzes code produced by the coder agent. Runs the verification skill, traces code paths, checks logic for gaps, unintended changes, edge cases, and omissions. Use proactively after implementation is complete, when coder says "done", or when asked to review/verify code quality.

allsmog/vuln-scout

Agent

Use this agent to verify security findings and eliminate false positives. Analyzes code context, data flow paths, and exploitability with structured evidence to determine if a finding is a true positive or false positive.

allsmog/vuln-scout

Agent

Use this agent when the user wants to "write an exploit", "create a PoC", "develop proof of concept", "automate the attack", or needs help creating exploit scripts during Phase 3 of whitebox security review.

allsmog/vuln-scout

Agent

Use this agent when the user asks to "create a threat model", "analyze threats", "STRIDE analysis", "what are the threats", "threat modeling", "identify attack vectors", "map attack surface", or needs systematic threat identification with data flow diagrams.

DevSwat-ResonantGenesis/RG_IDE

Agent

Answer telemetry questions with data queries using Kusto Query Language (KQL).

DevSwat-ResonantGenesis/RG_IDE

Agent

Agent for demonstrating VS Code features.

DevSwat-ResonantGenesis/RG_IDE

Agent

Specialist in developing the Agent Sessions Window.

Yashvendra/claude-security-skills

Agent

Performs ultra-granular per-function deep analysis for security audit context building. Use when analyzing dense functions, data-flow chains, cryptographic implementations, or state machines.

ReeperReepx/Security-Audit-Claude-Skill

Agent

Parallelized read-only scanner that checks a batch of files against security patterns and returns structured findings.