메뉴
OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Create complete specs (requirements, design, tasks) for all features in roadmap.md using parallel sub-agent dispatch by dependency wave.
Initialize a new specification with detailed project description
OpenUltraSAST patch, fix audit, differential review, adversarial review, and patch validation workflow. Use when proposing or auditing fixes for OpenUltraSAST findings from opencode.
OpenUltraSAST Kiro implementation steering. Use when continuing `.kiro/specs/openrouter-sast-harness/tasks.md`, choosing the next phase, updating checkboxes, or keeping implementation aligned with the spec.
OpenUltraSAST false-positive elimination, ranking calibration, evidence ladder, verifier triage, and finding adjudication. Use when reviewing findings, reducing false positives, or deciding whether evidence is enough.
| name | openultrasast-scan |
| description | OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode. |
Use this skill to steer OpenUltraSAST scan workflows from opencode.
static_corroboration, not verified vulnerabilities..openultrasast/runs/<scan-id>/.scan_id, run_dir, finding count, and the strongest available evidence level.uv run ousast scan <repo> --mode quick
uv run ousast index <repo>
uv run pytest
suspicion means a model or weak signal raised a hypothesis.static_corroboration means deterministic code evidence exists.crash_reproduced requires an artifact-backed reproducer.root_cause_explained requires independent verifier reasoning.patch_validated requires rerunning relevant checks after the patch.Do not describe a finding as verified unless its evidence level meets the configured report threshold.