codeprobe-security

Scan codebases to identify and score security vulnerabilities with remediation guidance.

4|2|Updated Mar 28, 2026
One-click install
npx skills add https://github.com/nishilbhave/codeprobe --skill codeprobe-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: codeprobe-security
Source: https://github.com/nishilbhave/codeprobe/tree/main/skills/codeprobe-security
Command: npx skills add https://github.com/nishilbhave/codeprobe --skill codeprobe-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detects and scores security vulnerabilities across codebases to help teams quickly identify and remediate risks.

Core Features & Use Cases

  • Identifies common vulnerability classes including Injection, Authentication & Authorization, Cross-Site Scripting (XSS), Mass Assignment, CSRF, Insecure Deserialization, Sensitive Data Exposure, Broken Access Control, and Security Misconfiguration.
  • Generates severity-scored findings with copy-pasteable fix prompts to guide remediation.
  • Excludes internal admin tools and dependencies with known CVEs from scanning, and provides actionable guidance for multi-language codebases.

Quick Start

Run the security scan on your codebase to generate a findings report with actionable fixes.

Frequently Asked Questions about codeprobe-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities?

To scan for security vulnerabilities, run a static analysis on your source files to identify common classes like injection, XSS, and CSRF. The scan produces a prioritized findings report with severity scores and actionable remediation prompts.

What types of security vulnerabilities can static analysis detect in my code?

Static analysis can detect security vulnerabilities including injection, authentication and authorization issues, XSS, CSRF, mass assignment, insecure deserialization, sensitive data exposure, broken access control, and security misconfiguration across multi-language codebases.

Can I use vulnerability scanning for multi-language projects?

Yes, vulnerability scanning supports multi-language projects by scanning source files for common vulnerability classes. It generates prioritized findings with severity scores, locations, and actionable remediation guidance across different languages.

Does the security scanner exclude internal admin tools and dependencies with known CVEs?

Yes, the security scanner excludes internal admin tools and dependencies with known CVEs from scanning. This focuses the analysis on your own source files, producing prioritized findings with actionable fixes for actual codebase exposure.

How do I get actionable fix prompts for security findings in my code?

To get actionable fix prompts for security findings, scan your source files to generate a findings report. The report includes copy-pasteable remediation guidance with severity scores and vulnerability locations to guide your fixes.

What is the best way to prioritize security remediation across a codebase?

The best way to prioritize security remediation is to generate severity-scored findings from a static code scan. This highlights critical exposure from vulnerabilities like injection and broken access control, providing actionable prompts for immediate fixes.