القائمة
OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
Create complete specs (requirements, design, tasks) for all features in roadmap.md using parallel sub-agent dispatch by dependency wave.
Initialize a new specification with detailed project description
OpenUltraSAST patch, fix audit, differential review, adversarial review, and patch validation workflow. Use when proposing or auditing fixes for OpenUltraSAST findings from opencode.
OpenUltraSAST Kiro implementation steering. Use when continuing `.kiro/specs/openrouter-sast-harness/tasks.md`, choosing the next phase, updating checkboxes, or keeping implementation aligned with the spec.
OpenUltraSAST false-positive elimination, ranking calibration, evidence ladder, verifier triage, and finding adjudication. Use when reviewing findings, reducing false positives, or deciding whether evidence is enough.
استنادا إلى تصنيف SOC المهني
| name | openultrasast-scan |
| description | OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode. |
Use this skill to steer OpenUltraSAST scan workflows from opencode.
static_corroboration, not verified vulnerabilities..openultrasast/runs/<scan-id>/.scan_id, run_dir, finding count, and the strongest available evidence level.uv run ousast scan <repo> --mode quick
uv run ousast index <repo>
uv run pytest
suspicion means a model or weak signal raised a hypothesis.static_corroboration means deterministic code evidence exists.crash_reproduced requires an artifact-backed reproducer.root_cause_explained requires independent verifier reasoning.patch_validated requires rerunning relevant checks after the patch.Do not describe a finding as verified unless its evidence level meets the configured report threshold.