sc-orchestrator

Orchestrate four-phase security scans with error handling and progress updates.

7|Updated Apr 9, 2026
One-click install
npx skills add https://github.com/fatihkan/badi --skill sc-orchestrator-fatihkan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sc-orchestrator
Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-orchestrator
Command: npx skills add https://github.com/fatihkan/badi --skill sc-orchestrator-fatihkan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The orchestrator coordinates the entire 4-phase security scanning pipeline, managing execution, dispatching sub-skills, tracking progress, and aggregating results to ensure a complete run even in the presence of errors.

Core Features & Use Cases

  • Orchestrates Phase 0 Pre-Check and all subsequent phases: Reconnaissance, Dependency Audit, Vulnerability Hunting, Verification, and Reporting.
  • Dispatches and coordinates specialized skills (e.g., sc-recon, sc-dependency-audit, sc-sqli, sc-xss, sc-verifier, sc-report) while handling failures gracefully.
  • Generates and stores intermediate and final reports under security-report/, enabling incremental scans and audit trails.
  • Provides real-time progress updates and supports diff/incremental mode for scanning only changed files.

Quick Start

Trigger a full security scan by issuing the command 'run security check'.

Frequently Asked Questions about sc-orchestrator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a full vulnerability scanning workflow across multiple phases?

Automate vulnerability scanning workflows by orchestrating a 4-phase pipeline covering Reconnaissance, Dependency Audit, Vulnerability Hunting, Verification, and Reporting. It dispatches specialized sub-skills, tracks execution, and aggregates results.

What is the best way to coordinate multiple security scanning tools without losing data on failures?

Coordinate security scanning tools with an orchestration layer that handles failures gracefully. It manages pre-checks, dispatches sub-skills, tracks progress, and aggregates phase results to ensure a complete run even when individual scans encounter errors.

Can I run incremental security scans on only the changed files in my repository?

Run incremental security scans using the built-in diff mode. This mode targets only changed files, generating and storing intermediate and final reports under the security-report directory to enable incremental scans and maintain audit trails.

How does a security scan orchestrator handle progress tracking and reporting?

A security scan orchestrator handles progress tracking by providing real-time status updates during execution. It aggregates outputs from all phases, storing intermediate and final reports under a designated security-report directory for audit trails.

Do I need specific sub-skills to execute a complete security scanning pipeline?

Executing a complete security scanning pipeline requires dispatching specialized sub-skills for each phase, such as sc-recon, sc-dependency-audit, sc-sqli, sc-xss, sc-verifier, and sc-report. The orchestrator coordinates these components to deliver aggregated results.

What are the limitations of orchestrating security scans across specialized sub-skills?

Orchestrating security scans depends on the availability and compatibility of dispatched sub-skills. While it handles failures gracefully to ensure a complete run, the overall scan depth is constrained by the specific vulnerability hunting capabilities of the individual specialized skills.