emit-sarif Skill
Serialize AI-detected security findings as SARIF v2.1.0 conforming to the AI-generated-findings profile, using the Sarif.Multitool emit verbs. Published by microsoft in sarif-sdk.
What is emit-sarif Skill?
Serialize AI-detected security findings as SARIF v2.1.0 conforming to the AI-generated-findings profile, using the Sarif.Multitool emit verbs. Published by microsoft in sarif-sdk. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Documentation
- Data analysis
- Security review use cases
- Documentation use cases
Technical details
- Install or run with Copy skill directory
When to use emit-sarif Skill
- Use it for security review.
- Use it for documentation.
- Use it for data analysis.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/sarif-sdk
- Skill file: skills/emit-sarif/SKILL.md
What it does
Serialize AI-detected security findings as SARIF v2.1.0 conforming to the AI-generated-findings profile, using the Sarif.Multitool emit verbs.
Skill instructions
Emit SARIF Findings Context You have completed a security analysis of a codebase and hold one or more findings in working memory. This skill serializes those findings as a SARIF v2.1.0 log that downstream tooling — result-management systems, triage agents, and autonomous remediation agents — can consume without tool-specific knowledge. The output contract is the AI-generated-findings profile defined in docs/ai/generating-sarif.md. That document is the normative reference; this skill is the operational wrapper that uses the Sarif.Multitool emit verbs to produce a conformant log. When to apply this skill Apply this skill when an agent is the originating detector (not post-processing another tool's SARIF) and needs to persist findings. Signals: - The agent has enumerated vulnerabilities with file/line locations and CWE classifications. - A downstream step expects a .sarif artifact. - The orchestrator requests ai/origin: "generated" output (or annotated / synthesized). Prerequisites - Sari
Explore related resources
Frequently asked questions
What is emit-sarif?
emit-sarif is a open-source AI agent skill with Copy skill directory. Serialize AI-detected security findings as SARIF v2.1.0 conforming to the AI-generated-findings profile, using the Sarif.Multitool emit verbs.
Who is emit-sarif best for?
emit-sarif is best for reusing agent instructions, scripts, and references, security review workflows, documentation workflows, data analysis workflows.
How do I install emit-sarif?
Install or run emit-sarif using Copy skill directory. Check emit-sarif for the latest setup command.
Is emit-sarif actively maintained?
emit-sarif may need a closer maintenance check before production use.
Auto-fetched from GitHub.
