skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

run

Detect tech stack, run parallel security scans, and consolidate findings.

12|1|Updated Feb 9, 2026
Search Tags:#code analysis#security#penetration testing#appsec#vulnerability scanning#red teaming
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill run-florianbuetow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: run
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/run
Command: npx skills add https://github.com/florianbuetow/claude-code --skill run-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of scanning codebases for security vulnerabilities, detecting the tech stack, selecting appropriate tools, and running them in parallel to provide a comprehensive security assessment.

Core Features & Use Cases

  • Automated Vulnerability Detection: Scans code for a wide range of security flaws across different languages and frameworks.
  • Intelligent Tool Orchestration: Automatically identifies the project's technology stack and deploys the most relevant security scanners and analysis tools.
  • Configurable Depth: Allows for quick scans, standard analysis, deep dives into data flows, or expert-level red team simulations.
  • Use Case: A developer can initiate a full security audit of their application with a single command, receiving a consolidated report of all identified vulnerabilities and potential attack vectors.

Quick Start

Run a standard security scan on the current project, analyzing code and relevant categories.

Frequently Asked Questions about run

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate application security scanning across an unknown tech stack?▼

Automated security scanning detects the project's technology stack, selects the relevant security analysis tools, and runs them in parallel to provide a comprehensive vulnerability assessment.

What is the best way to run a quick vulnerability check versus a deep red team simulation?▼

Security scanning supports configurable scan depths, allowing you to initiate everything from quick vulnerability checks to expert-level red team simulations and deep data flow analysis.

How do I filter security scan results by severity and scope?▼

Vulnerability scanning provides options for scope limitation and severity filtering, enabling you to focus the security assessment on specific critical areas of the application.

Can I get automated fix suggestions after a penetration testing scan?▼

Yes, the comprehensive security assessment consolidates identified vulnerabilities and provides automated fix suggestions to help remediate potential attack vectors.

Does automated code analysis work without installing specific security tools manually?▼

Intelligent tool orchestration automatically identifies the project's tech stack and deploys the necessary security scanners, removing the need to manually select and configure individual analysis tools.

Related Skills

Explore More Software Engineering Skills→
slbugslbug
7

rb:secrets

Detect leaked secrets and exposed credentials in Ruby codebases.

Community
Intermediate
murphytruemanmurphytrueman
155

backlog-generator

Convert audit findings into sprint-ready tickets with effort estimates and acceptance criteria.

Community
Advanced
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
NabilThangeNabilThange
1

red-team-tactics

Guide red team exercises using MITRE ATT&CK attack phases and techniques.

Community
Intermediate