<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Agentic Security Field Guide: Code review and static analysis (SAST)</title><description>Tools for the task: Code review and static analysis (SAST), with reach and lab verdict.</description><link>https://readbeforerun.ai/</link><item><title>Cloudflare Security Audit Skill (reach 2 · not run yet)</title><link>https://readbeforerun.ai/catalog/cloudflare-security-audit-skill/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/cloudflare-security-audit-skill/</guid><description>Agent skill that runs a multi-phase, source-first security audit of a codebase and verifies each candidate finding.</description><pubDate>Mon, 19 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Trail of Bits Agentic Actions Auditor (reach 2 · not run yet)</title><link>https://readbeforerun.ai/catalog/trailofbits-agentic-actions-auditor/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/trailofbits-agentic-actions-auditor/</guid><description>Claude Code plugin that statically audits GitHub Actions workflows which invoke AI coding agents for injection and permission flaws.</description><pubDate>Mon, 19 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Trail of Bits Static Analysis (reach ≥2 · not run yet)</title><link>https://readbeforerun.ai/catalog/trailofbits-static-analysis/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/trailofbits-static-analysis/</guid><description>Claude Code plugin that drives CodeQL, Semgrep and SARIF parsing to find security vulnerabilities in a codebase.</description><pubDate>Mon, 19 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>