domains / families / security / sast-analysis

sast-analysis

authentic

Perform codebase analysis and architecture mapping as the first phase of a security assessment. Explores the tech stack, frameworks, entry points, data flows, and trust boundaries. Outputs sast/architecture.md. Run this before any vulnerability detection skill. Use when asked to analyze a codebase for security or when sast/architecture.md does not yet exist.

When to use

• codebase analysis
• architecture mapping
• tech stack exploration
• entry point identification
• data flow tracing
• trust boundary mapping
• security assessment reconnaissance

When not to use

• vulnerability detection
• reporting specific vulnerabilities

Skill page

Source