SARIF Parsing
Reads, merges and filters SARIF reports from scanning tools.
How to use it
Install it with the open Skills CLI (needs Node.js), then restart your agent:
npx skills add trailofbits/skills --skill sarif-parsing- Download the ZIP from this page and unzip it.
- Put the
sarif-parsingfolder in.claude/skills/inside your project (or~/.claude/skills/for all projects). - Restart Claude Code and call it with
/sarif-parsing.
بالعربي
يقرأ ويجمع ويصفي تقارير SARIF الناتجة من أدوات الفحص؛ لا يجري فحصا أمنيا من الصفر.
More for security
- /security-review (built into Claude Code): Runs a full security review of the pending changes on your branch.
- Security Review: Reviews auth, input handling, secrets and APIs before release, using a practical security checklist.
- Audit Context Building: Builds a precise picture of code flow, assumptions and dependencies before a security audit, so findings have context.