The Secure Code Analysis with FinGuard AI Skill is designed to assist developers in examining source code for vulnerabilities using the FinGuard CLI. It aligns with serious threat levels and provides a limited loop for revision and re-evaluation. This tool is not meant for general code quality reviews, software composition analysis (SCA), or penetration testing.
What this skill does
Integrates local FinGuard scan into the code change workflow to serve as a secure reviewer.
Employs Semgrep-based static analysis to identify vulnerabilities as defined in rules/ and mapping/rules.yaml.
Categorizes findings based on severity and cross-verifies with actual code for accurate vulnerability management.
Limits automatic fix and revalidation processes to a maximum of three attempts per finding.
Who it is for
This skill is suitable for developers and security teams who utilize AI coding agents such as Claude Code, Cursor, and Codex, and are responsible for maintaining secure software development practices.
Use cases
Enhancing a development team's process for identifying potential source code vulnerabilities.
Ensuring compliance with organizational security policies by configuring a block-on severity level.
Facilitating code reviews by automating security checks in CI/CD pipelines.
Technical details
The skill relies on the FinGuard CLI, Semgrep for static code analysis, and must be configured with available rules/ and mapping/rules.yaml files. The user should ensure that the FinGuard assets are located correctly for execution alongside the primary toolset.
For authorised security testing, defensive research and educational use only.
Source & Licence
This package is built on open-source work published by LeeYudok (LeeYudok/doksam-skills) and distributed under MIT. The original licence text and copyright notice are included in your download.
Personal and commercial use, modification and redistribution are permitted, provided the original copyright and licence notice are retained.
Your purchase covers curation, licence verification, packaging, documentation and instant delivery. It does not grant exclusive rights to the underlying open-source code, which remains available under its original licence.
Delivery & Support
Delivery: instant — a secure download link is emailed to you as soon as payment is confirmed.
Format: ZIP archive containing the skill files, documentation and the original licence.
Updates: updates are included only where stated on this page.
Refunds
This is a digital product delivered immediately after purchase. By completing your order you request immediate delivery and acknowledge that, once the download has been accessed, the statutory right to cancel no longer applies to the extent permitted by law. Refund requests are handled in accordance with our published Refund Policy.
Claude, Codex, Gemini and Cursor are trademarks of their respective owners. MCP Cart is an independent marketplace and is not affiliated with, endorsed by, or sponsored by any of them. Compatibility references describe interoperability only.