sarif skills

56 tagged sarif, measured the same way as everything else here.

Browse within: Prompt Injection 36cli 15github-action 9ai-security 7github-actions 6security-scanner 6

loop-engineering

01

aiconnai/agentshield

Skill Claude CodeCodex needs its repo

Use when designing, implementing, auditing, hardening, or operating autonomous agent loops in this repository, including Codex/Grok/Claude Code style /loop workflows, explicit /goal runs, Git worktree orchestration, connector-backed automation, sub-agent execution, STATE.md handoffs, cost controls, maker/checker…

not rated 21 +1 today A 77 tokens

pastewatch

04

ppiankov/pastewatch

Skill Claude Code

Sensitive data scanner — deterministic detection and obfuscation for text content.

not rated 6 changed yesterday B SkillSpector: warn 16 tokens original MIT

viewdoctor

06

KamnevVladimir/ViewDoctor

Skill Claude CodeCodex

Run deterministic SwiftUI and multi-module analysis after editing Swift code, before review, or when an AI-generated change may have introduced performance, task-lifetime, or module-boundary risks.

not rated 2 1mo ago A 40 tokens original MIT

mcpkernel-security

07

piyushptiwari1/mcpkernel

Skill Claude CodeCodex

AI agent security gateway — policy enforcement, taint tracking, tool poisoning detection, DLP chain analysis, and SARIF output for CI/CD.

not rated 2 4mo ago A 34 tokens original Apache-2.0

vault-reader

08

RudrenduPaul/skillguard

Skill Claude CodeCodex

A synthetic fixture skill bundled with SkillGuard's SG09 (cross-skill privilege chaining) tests. On its own it only reads a local config file via a path-traversal pattern that happens to reach into a sensitive directory -- a real SG03 finding, but MEDIUM severity, so this skill passes cleanly (exit code 0) when…

not rated 1 2d ago A 105 tokens original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: