railguard-unified-scan

Coordinate 12 subagents for multi-phase vulnerability analysis with SQLite tracking.

76|9|Updated Feb 27, 2026
One-click install
npx skills add https://github.com/Netflix-Skunkworks/railguard-skill --skill railguard-unified-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: railguard-unified-scan
Source: https://github.com/Netflix-Skunkworks/railguard-skill/tree/main/.claude/skills/railguard-unified-scan
Command: npx skills add https://github.com/Netflix-Skunkworks/railguard-skill --skill railguard-unified-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires rg, python3, semgrep, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Railguard Unified Security Scanner orchestrates a multi-phase security analysis, combining file-handoff data transport with SQLite-backed progress tracking to enable resilience in large-scale repo scans.

Core Features & Use Cases

  • Orchestrated multi-phase vulnerability analysis using 12 specialized subagents
  • Lean findings transport via /tmp handoff and batch-based FP validation
  • SQLite-based lifecycle tracking with crash recovery and multi-scan history
  • Cross-language support for common stacks to identify vulnerabilities across repos
  • Clear traceability and reproducibility for security reviews

Quick Start

Run a tracked, resilient security scan over a repository using railguard-unified-scan.

Frequently Asked Questions about railguard-unified-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a resilient multi-phase vulnerability scan for a large repository?

A resilient vulnerability scan coordinates 12 specialized subagents to perform multi-phase analysis, sharing findings via /tmp stubs and tracking progress in SQLite for crash recovery during large repo scans.

Does this security scanner support analyzing code across multiple languages?

Yes, the security scanner supports Python, JavaScript, TypeScript, Java, Go, Ruby, and PHP, allowing you to identify vulnerabilities across common tech stacks within a single repository.

What do I need to install to perform orchestrated vulnerability analysis with SQLite tracking?

To perform orchestrated vulnerability analysis, you need ripgrep (rg) and Python 3 installed, which enable multi-phase scanning, batch processing, and SQLite-based lifecycle tracking.

How does batch processing work for false positive validation in vulnerability scanning?

Batch processing normalizes results from subagents and validates false positives using lean findings transported via /tmp handoff stubs, ensuring efficient data handling during multi-phase security reviews.

What is the best way to track scan history and recover from crashes during security analysis?

The best way to track scan history is using SQLite-backed lifecycle tracking, which provides multi-scan history and crash recovery to maintain resilience across large-scale vulnerability analyses.

Why does my multi-phase security scan require ripgrep and Python 3?

Ripgrep and Python 3 are required because they drive the file-handoff data transport and orchestrate the 12 specialized subagents needed to perform cross-language vulnerability analysis and batch normalization.