scan-deep

Enrich initial-scan.json findings into a Pydantic-conformant deep-scan.json report.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-deep
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scan-deep
Source: https://github.com/ricardoo022/PentestAI-with-claude-code/tree/main/.claude/skills/scan-deep
Command: npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-deep

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep security scanning often stops at initial findings; scan-deep enriches and validates an initial scan by performing in-depth testing across detected stack configurations, removing false positives, and producing a comprehensively enriched JSON output that conforms to the Pydantic ScanReport schema.

Core Features & Use Cases

  • Validate and extend an initial scan JSON by re-processing findings against the ScanReport schema.
  • Perform stack-aware discovery to reveal additional vulnerabilities and corroborate existing findings.
  • Prune false positives and prepare production-ready output for remediation workflows.

Quick Start

Invoke with /scan-deep {client_name} to generate an enriched, validated scan report from an existing initial-scan.json.

Frequently Asked Questions about scan-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enrich an initial security scan with deeper vulnerability validation?

To enrich an initial security scan, you can process an existing initial-scan JSON file to validate findings, perform stack-aware discovery, remove false positives, and output a deep-scan JSON report conforming to the Pydantic ScanReport schema.

What is the best way to remove false positives from a web application security scan?

Removing false positives from a web application security scan is achieved by re-processing initial findings against a standardized schema and performing stack-aware probing to corroborate existing vulnerabilities before outputting a validated report.

Can I validate JSON scan reports against the Pydantic ScanReport schema?

Yes, you can validate JSON scan reports against the Pydantic ScanReport schema by loading the initial scan data, reconciling the findings, and producing a Pydantic-conformant JSON output for remediation workflows.

How do I perform stack-aware discovery to expand a web application assessment?

Performing stack-aware discovery to expand a web application assessment involves probing detected stack configurations to reveal additional vulnerabilities, corroborating initial findings, and enriching the final validated output.

Do I need an existing initial-scan.json to deepen my security scan?

Yes, you need an existing initial-scan.json because the deep scan process requires an initial scan to load, validate against the ScanReport schema, and enrich with stack-aware discovery and false positive removal.

Why does my security scan JSON report fail schema validation during enrichment?

Security scan JSON reports fail schema validation during enrichment when initial findings do not conform to the standardized ScanReport schema, requiring reconciliation and validation before producing a production-ready output.