Run the OFFAT-AI white-box (SAST) pipeline over a codebase — recon, hunt, chain, verify, report — following the security-harness workflow. Use when the user wants a static source-code security review, to "find vulnerabilities in this repo", scan for…
OWASP/OFFAT
- Latest recorded source activity
- SkillsMP catalog refreshed
- skills collected
- 3
- GitHub stars
- 677
- GitHub forks
- 92
Install with an AI assistant
Copy this prompt into the AI assistant you're using.
Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/OWASP/OFFAT.Loading the repository README…
Skills in this repository
classification pending
Showing 3 of 3 collected skills.
skill
occupation
description
updated
occupation
unclassified
description
updated
occupation
unclassified
description
Run the OFFAT-AI gray-box pipeline over a codebase - map the HTTP endpoint attack surface from source with graft, fuse it with the SAST hunters, and AI-analyze only the findings reachable from a mapped endpoint (batched, cached, model-tiered). No live…
updated
occupation
unclassified
description
Re-triage an existing OFFAT-AI findings file (report.json / findings.jsonl, or any JSON/JSONL list of findings) with the shared AI/heuristic triager to add or refresh verdicts, CVSS and remediation. Use when the user wants to validate findings, cut false…
updated
Showing 3 of 3 collected skills.