SAST Methodology is an AI Engineering skill for Claude Code, published by H-mmer in pentest-agents.
SAST Methodology breaks static analysis into focused agent steps for finding and verifying security bugs. Use it when you need file ranking, flow tracing, gap analysis, PoC confirmation, or adversarial validation.
SAST Methodology is cataloged under AI Engineering on DirSkills. SAST Methodology comes from a repository tagged agents, bug-bounty, bugcrowd, claude-code and hackerone.
Documentation
A single agent asked to "find vulnerabilities" will hallucinate. The pipeline decomposes the task into focused steps, with external state carrying the synthesis between steps. All agents run on model: "inherit" except flow-tracing and gap-analysis, which pin opus for cross-file reasoning depth.
This is the opening of the README. Read the full README on GitHub.
SAST Methodology is one of 25 skills that DirSkills catalogs from H-mmer/pentest-agents, the repository it ships in. Its siblings there include Analyze, Autopilot and Brain. Each one is a separate skill with its own page in this directory, installs the same way SAST Methodology does, and is maintained by H-mmer in that same repository. The rest of the collection is listed on the H-mmer/pentest-agents page.
SAST Methodology ranks #1599 by stars among the 2451 AI Engineering skills in this catalog. The most-starred ones next to it are Architecture Decision Records, AI-First Engineering and Agentic OS. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of SAST Methodology against them. Open each page to compare what they document and how they install.
SAST Methodology is one of 25 skills cataloged on DirSkills from H-mmer/pentest-agents.
SAST Methodology is one of 2451 AI Engineering skills cataloged on DirSkills, ranked #1599 by stars among them.