Scan scoped repository files for security vulnerabilities using 21 rule categories.
npx skills add https://github.com/pageel/para-workspace --skill scan-sec
Please help me install this Agent Skill. Skill: scan-sec Source: https://github.com/pageel/para-workspace/tree/main/templates/common/agents/skills/scan-sec Command: npx skills add https://github.com/pageel/para-workspace --skill scan-sec
It helps you detect security vulnerabilities in a repository before you ship by turning a “scan the code” request into a structured, evidence-based report with clear severities.
Ask the agent to scan security for your repo and generate a report in the language you prefer.
High-intent search queries and answers about installing and using this skill.
Data-flow analysis improves code security scanning by tracing variable states across L1–L4 execution paths to identify actual vulnerabilities, avoiding the false positives typical of naive pattern matching. It evaluates 21 rule categories to produce evidence-based findings.
Yes, you can run a security vulnerability scan on scoped git targets like staged, uncommitted, or specific commit windows. This targets only the modified code to produce structured reports faster without analyzing the entire repository.
To generate a JSON summary for vulnerability detection automation, run a repository security scan. The process outputs a canonical JSON file containing structured findings mapped to rule categories, suitable for downstream CI/CD pipelines.
Yes, this code audit tool requires Node, bash, and gh (GitHub CLI) to be installed. These dependencies are necessary to execute the scanning scripts and interact with repository metadata for security analysis.
The best way to handle vulnerability detection for large repositories is using sequential chunking. This method processes scoped files sequentially, ensuring portability and equivalent output quality without overwhelming system resources.
Blast-radius analysis in a repository security report adds call-tree context to identified vulnerabilities. This helps prioritize which security flaws to fix first by showing the potential impact and reach of the vulnerable code.
GLaDO8Generates concise Git commit messages and commits staged or unstaged changes.
Logisoft-webScan code repositories for vulnerabilities in dependencies, secrets, and configurations.
brainbrewlabsFix code scanner, security auditor, and linter issues with verified edits and reports.
wyattowalshScan codebases for SAST, secrets, and dependency vulnerabilities.
