cyber-neo

Analyze projects for security vulnerabilities and generate prioritized remediation reports.

Updated Mar 27, 2026
One-click install
npx skills add https://github.com/AlejandroFigini/artist-portfolio --skill cyber-neo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cyber-neo
Source: https://github.com/AlejandroFigini/artist-portfolio/tree/main/.agent/skills/cyber-neo
Command: npx skills add https://github.com/AlejandroFigini/artist-portfolio --skill cyber-neo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Developers and security teams spend excessive time identifying vulnerabilities across dependencies, code quality, and configuration. Cyber Neo automates this process and produces prioritized remediation guidance.

Core Features & Use Cases

  • Dependency vulnerability scanning (SCA)
  • Code security analysis (SAST) and secret detection
  • Configuration and CI/CD security assessment
  • OWASP Top 10 and CWE-25 coverage with prioritized fixes
  • Generates a remediation-focused security report for developers

Quick Start

Point Cyber Neo at your project directory to run a full security analysis and generate the remediation report.

Frequently Asked Questions about cyber-neo

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a SAST and SCA security audit on my project?

To run a security audit, point the scanner at your project directory to automatically analyze code patterns (SAST) and dependencies (SCA), producing a prioritized remediation report for identified vulnerabilities.

What is the best way to check a codebase for OWASP 2025 and CWE Top 25 vulnerabilities?

The best way to check for OWASP 2025 and CWE Top 25 vulnerabilities is using an automated security analysis tool that scans for misconfigurations, authentication flaws, and cryptographic weaknesses, generating actionable fixes.

Can I detect leaked secrets and CI/CD misconfigurations during a vulnerability scan?

Yes, a comprehensive vulnerability scan can detect leaked secrets, CI/CD misconfigurations, and supply chain risks alongside standard code and dependency analysis to ensure full project security coverage.

Does automated security analysis require external dependencies to scan a repository?

No external dependencies are required to run the security analysis. You simply point the scanner at your target project directory to initiate the SAST, SCA, and configuration assessment processes.

Why does a SAST vulnerability scan need to include supply chain risk checks?

A SAST vulnerability scan needs supply chain risk checks because modern applications rely heavily on external dependencies, meaning CI/CD pipeline compromises or dependency poisoning can introduce critical security flaws.