skills.rest
WesleySmits
WesleySmitsCOMMUNITY
Explore all skills by this author →
Website𝕏@iamwesleysmitsGitHub

detecting-security-vulnerabilities

Scan codebases for security vulnerabilities and unsafe patterns.

6|2|Updated Jan 18, 2026
Search Tags:#security#owasp#reporting#vulnerabilities#static-analysis#threat-detection#code-scan
One-click install
npx skills add https://github.com/WesleySmits/agent-skills --skill detecting-security-vulnerabilities
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: detecting-security-vulnerabilities
Source: https://github.com/WesleySmits/agent-skills/tree/main/.agent/skills/security-threat-detector
Command: npx skills add https://github.com/WesleySmits/agent-skills --skill detecting-security-vulnerabilities

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scans code for security vulnerabilities and unsafe patterns. Use when the user asks about security, mentions OWASP, credentials, secrets, XSS, SQL injection, or wants to audit code for threats.

Core Features & Use Cases

  • Automated scanning with multiple tools (npm audit, Semgrep, Snyk, ESLint security plugin, Gitleaks) to detect known misconfigurations, secrets leakage, and insecure patterns.
  • Pattern-based detection for credentials leakage, unsafe code patterns, and OWASP Top 10 checks.
  • Generate a comprehensive remediation-focused security report with severity categorization and suggested fixes.

Quick Start

Ask me to run a security scan on the target codebase and generate a remediation-focused report.

Frequently Asked Questions about detecting-security-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and OWASP Top 10 issues?▼

You can scan codebases for security vulnerabilities and OWASP Top 10 issues by running automated tools like Semgrep and npm audit alongside pattern-based checks. The scanner categorizes findings by severity and generates remediation-focused reports.

Can I detect secrets and credential leakage in JavaScript and Python projects?▼

Yes, you can detect secrets and credential leakage in JavaScript and Python projects using integrated tools like Gitleaks. It identifies exposed credentials and unsafe patterns during code reviews or pre-deployment checks.

What is the best way to generate a remediation report for SQL injection and XSS findings?▼

The best way to generate a remediation report for SQL injection and XSS findings is to run an automated security scan. It categorizes threats by severity and provides actionable remediation guidance for each detected vulnerability.

Does static analysis for security threats work with Java and Go codebases?▼

Static analysis for security threats works with Java and Go codebases by applying pattern-based detection and scanner integrations. It identifies unsafe code patterns and known misconfigurations across multiple supported languages.

How do I run a pre-deployment security audit using Snyk and Semgrep?▼

To run a pre-deployment security audit using Snyk and Semgrep, initiate a security scan on your target codebase. The scan detects known misconfigurations and insecure patterns, outputting a comprehensive severity-categorized report.

Related Skills

Explore More Software Engineering Skills→
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
rkmahale17rkmahale17
14

Security Scan

Scan code repositories for secrets, network flaws, and vulnerable dependencies.

Community
Intermediate
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

pentest-ad-attacker

Execute Active Directory attacks and credential access techniques with Impacket, CrackMapExec, and Certipy.

Community
Advanced