scan

Execute automated security scans for dependency vulnerabilities, static code analysis, and secrets detection.

1|Updated Jan 16, 2026
One-click install
npx skills add https://github.com/coreindustries/core-ai-template --skill scan-coreindustries
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scan
Source: https://github.com/coreindustries/core-ai-template/tree/main/.claude/skills/scan
Command: npx skills add https://github.com/coreindustries/core-ai-template --skill scan-coreindustries

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of identifying security vulnerabilities within your codebase, ensuring a more secure and robust application.

Core Features & Use Cases

  • Comprehensive Scanning: Performs dependency, code, and secrets detection.
  • Vulnerability Categorization: Classifies findings by severity (Critical, High, Medium, Low, Info).
  • Remediation Guidance: Provides actionable steps to fix identified issues.
  • Use Case: Before deploying a new feature, run a full security scan to catch any potential vulnerabilities introduced, ensuring compliance with security standards.

Quick Start

Run a full security scan on the entire project.

Frequently Asked Questions about scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an automated security scan on my codebase?

Run an automated security scan by executing a full project scan to detect dependency vulnerabilities, static code issues, and exposed secrets. The scan categorizes findings by severity and provides actionable remediation guidance.

What does secrets detection in a codebase identify?

Secrets detection identifies hardcoded credentials and sensitive information embedded within your codebase. It categorizes these exposed secrets by severity to help you prioritize removal and prevent unauthorized access to your application.

Can I scan for dependency vulnerabilities before deploying a new feature?

Yes, you can scan for dependency vulnerabilities before deploying a new feature. Running a full security scan catches potential vulnerabilities introduced by new dependencies, ensuring compliance with project-specific security rules.

What is the best way to remediate static code analysis findings?

The best way to remediate static code analysis findings is to follow the actionable remediation guidance provided by the scan. This guidance is based on OWASP Top 10 principles and classifies issues by severity to prioritize fixes.

How are security vulnerabilities categorized during a code analysis scan?

Security vulnerabilities are categorized by severity during a code analysis scan. Findings are classified as Critical, High, Medium, Low, or Info to help you prioritize remediation efforts based on the risk level of each issue.

Does the security scan work with project-specific security rules?

Yes, the security scan works with project-specific security rules. It provides remediation guidance based on OWASP Top 10 principles and integrates your custom security rules to ensure the codebase meets your specific compliance standards.