菜单
OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Create complete specs (requirements, design, tasks) for all features in roadmap.md using parallel sub-agent dispatch by dependency wave.
Initialize a new specification with detailed project description
OpenUltraSAST patch, fix audit, differential review, adversarial review, and patch validation workflow. Use when proposing or auditing fixes for OpenUltraSAST findings from opencode.
OpenUltraSAST Kiro implementation steering. Use when continuing `.kiro/specs/openrouter-sast-harness/tasks.md`, choosing the next phase, updating checkboxes, or keeping implementation aligned with the spec.
OpenUltraSAST false-positive elimination, ranking calibration, evidence ladder, verifier triage, and finding adjudication. Use when reviewing findings, reducing false positives, or deciding whether evidence is enough.
| name | openultrasast-scan |
| description | OpenUltraSAST scan, index, quick, standard, deep, SARIF, and report workflows. Use when running or planning `ousast scan`, repository indexing, or evidence-gated SAST analysis from opencode. |
Use this skill to steer OpenUltraSAST scan workflows from opencode.
static_corroboration, not verified vulnerabilities..openultrasast/runs/<scan-id>/.scan_id, run_dir, finding count, and the strongest available evidence level.uv run ousast scan <repo> --mode quick
uv run ousast index <repo>
uv run pytest
suspicion means a model or weak signal raised a hypothesis.static_corroboration means deterministic code evidence exists.crash_reproduced requires an artifact-backed reproducer.root_cause_explained requires independent verifier reasoning.patch_validated requires rerunning relevant checks after the patch.Do not describe a finding as verified unless its evidence level meets the configured report threshold.