メニュー
OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Create complete specs (requirements, design, tasks) for all features in roadmap.md using parallel sub-agent dispatch by dependency wave.
Initialize a new specification with detailed project description
OpenUltraSAST patch, fix audit, differential review, adversarial review, and patch validation workflow. Use when proposing or auditing fixes for OpenUltraSAST findings from opencode.
OpenUltraSAST Kiro implementation steering. Use when continuing `.kiro/specs/openrouter-sast-harness/tasks.md`, choosing the next phase, updating checkboxes, or keeping implementation aligned with the spec.
OpenUltraSAST false-positive elimination, ranking calibration, evidence ladder, verifier triage, and finding adjudication. Use when reviewing findings, reducing false positives, or deciding whether evidence is enough.
| name | openultrasast-scan |
| description | OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode. |
Use this skill to steer OpenUltraSAST scan workflows from opencode.
static_corroboration, not verified vulnerabilities..openultrasast/runs/<scan-id>/.scan_id, run_dir, finding count, and the strongest available evidence level.uv run ousast scan <repo> --mode quick
uv run ousast index <repo>
uv run pytest
suspicion means a model or weak signal raised a hypothesis.static_corroboration means deterministic code evidence exists.crash_reproduced requires an artifact-backed reproducer.root_cause_explained requires independent verifier reasoning.patch_validated requires rerunning relevant checks after the patch.Do not describe a finding as verified unless its evidence level meets the configured report threshold.