cck-security-scan

What problem does it solve?

This Skill uncovers security blind spots in .NET applications by scanning dependencies, source code, configuration, and data handling so teams can find exploitable issues before they reach production. It reduces manual checklist work and translates findings into developer-ready remediation steps to accelerate fixes and reduce risk.

Core Features & Use Cases

• Six-layer pipeline: package CVE checks, secrets detection, OWASP code pattern analysis, authentication and authorization review, CORS policy review, and data protection / PII checks.
• Actionable findings: severity-rated results with file:line locations, OWASP mapping, impact explanation, and specific before/after remediation guidance.
• Use Cases: pre-release security gates, dependency update scans, pre-penetration-test preparation, incident response triage, and periodic security reviews of ASP.NET and Blazor projects.

Quick Start

Run a full 6-layer security scan of the repository and produce a findings report that lists severity, file and line, OWASP category, impact, and specific remediation steps.