The Agent Skills Directory

[COMMAND_EXECUTION]: The embedded Python script MultiLanguageSASTScanner utilizes subprocess.run to execute security tools such as semgrep and bandit. The implementation uses argument lists rather than raw shell strings, which is a secure practice to prevent shell injection.
[EXTERNAL_DOWNLOADS]: The instructions include steps to install standard security utilities (Bandit, Semgrep, ESLint Security) via official package managers like pip and npm. These tools are well-known in the security community and are appropriate for the skill's stated purpose of vulnerability scanning.

security-scanning-security-sast