{"slug":"utkusen-sast-businesslogic","source_name":"utkusen/sast-businesslogic","name":"Utkusen/Sast Businesslogic","description":"Detect business logic vulnerabilities in a codebase using a three-phase approach: threat modeling (domain analysis and attack scenarios), batched verify (check exploitable gaps in parallel subagents, 3 scenarios each), and merge (consolidate batch results). Covers price manipulation, workflow bypass, limit violations, race conditions, reward abuse, etc. Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/businesslogic-results.md. Use when asked to find business logi","version":1,"lift":{"pass_rate_delta_pts":45.45,"pass_rate_pct":72.7,"total_cases":22,"passed_cases":16,"tokens_delta_pct":256.7,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-14T01:00:21.749395+00:00"},"skill_score":0.7273,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":45.45,"with_pass_pct":72.7,"without_pass_pct":27.3,"tokens_delta_pct":256.7,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":20,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-14T01:00:21.749395+00:00","run_id":"a1e46a4b-f22a-4e02-84bc-b2ca723c8993","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"4161b8b7746f35ac836ce83ea052a8abc751f07b7f56884e50607d66f4d9ada0","raw_url":"https://app.decimal.ai/s/utkusen-sast-businesslogic/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/utkusen-sast-businesslogic"}