fortify-scdast
Fortify ScanCentral DAST Skill
Fortify ScanCentral DAST (SC-DAST) integration via Model Context Protocol (MCP).
When to Use This Skill
- Run dynamic application security testing (DAST) scans
- List and monitor scan status
- Pause/resume running scans
- Discover available scan settings and policies
- Manage scan sensors and sensor pools
- View scan results in SSC using SSC skill
Available MCP Tools
Only key MCP tools for SC-DAST are listed here.
| Tool | Description | When to Use |
|---|---|---|
fcli_sc_dast_scan_start |
Start a new DAST scan | When user wants to run/start a DAST scan |
fcli_sc_dast_scan_list |
List all scans | List scans, check scan status |
fcli_sc_dast_scan_get |
Get details of a specific scan | Get scan details by ID |
More from crance/agent-skills-fortify
fortify-fod
use this skill whenever the user wants to list and filter application security findings, run SAST/SCA/DAST scans, discover applications and releases, and manage security scanning using Fortify on Demand (FoD). Triggers include: any mention of 'FoD', 'Fortify on Demand', 'list vulnerabilities', 'run SAST scan', 'run SCA scan', 'run DAST scan', 'list applications', 'list releases', 'package source code', 'security scan', and similar requests indicating interaction with FoD for application security scanning and vulnerability management.
11fortify-ssc
use this skill whenever the user wants to list and filter application security findings, discover applications and versions, and manage applications using Fortify Software Security Center (SSC). Triggers include: any mention of 'SSC', 'list vulnerabilities', 'list applications', and similar requests indicating interaction with Fortify SSC for application security tasks. OpenText Application Security is the new name for Fortify Software Security Center.
7fortify-onprem
Use this skill whenever the user wants to list and filter application security findings, run SAST or DAST scans, discover applications and versions, and manage security assessments using Fortify on-premises products: Software Security Center (SSC), ScanCentral SAST (SC-SAST), and ScanCentral DAST (SC-DAST). Triggers include: any mention of 'SSC', 'ScanCentral', 'SC-SAST', 'SC-DAST', 'list vulnerabilities', 'run SAST scan', 'run DAST scan', 'list applications', 'DAST scan', 'web scan', 'dynamic scan', and similar requests for on-premises Fortify products.
6fortify-scsast
ScanCentral SAST guide for MCP tools. Package source code, run SAST scans on ScanCentral sensors, monitor scan progress, and retrieve results from SSC.
5