scan

Scan codebases for OWASP Top 10 vulnerabilities and code quality issues.

1|Updated Jan 11, 2026

Search Tags:#code quality #OWASP #security #vulnerability #validation #scanning

Ready to run

npx skills add https://github.com/YH-05/finance --skill scan-yh-05

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: scan
Source: https://github.com/YH-05/finance/tree/main/.claude/skills/scan
Command: npx skills add https://github.com/YH-05/finance --skill scan-yh-05

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bandit, pip-audit, ruff, pyright, and includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security and quality assurance in software development by proactively identifying vulnerabilities and code quality issues.

Core Features & Use Cases

Comprehensive Security Scanning: Detects vulnerabilities based on OWASP Top 10 and common CWEs.
Code Quality Validation: Enforces coding standards, type consistency, and test coverage.
Automated Reporting & Scoring: Generates detailed reports with actionable insights and quality scores.
Use Case: Before merging a pull request, automatically run this Skill to ensure no critical vulnerabilities are introduced and that the code adheres to project quality standards.

Quick Start

Run a comprehensive security and quality scan on the project.

Frequently Asked Questions about scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my Python codebase for OWASP Top 10 vulnerabilities?▼

You can scan for OWASP Top 10 vulnerabilities by running this Skill, which uses bandit and pip-audit to identify security issues and common CWEs, then generates a detailed report with actionable remediation recommendations.

What is the best way to automate security and code quality validation before a pull request?▼

The best way to validate code quality before a pull request is to run an automated scan that enforces type consistency with pyright and coding standards with ruff, ensuring no critical vulnerabilities are introduced.

Does this security scanner integrate with bandit and pip-audit for dependency checking?▼

Yes, this scanner integrates directly with bandit for static application security testing and pip-audit for dependency vulnerability checking, delivering comprehensive OWASP-aligned reports and quality scores.

How do I validate code quality metrics and enforce type consistency in Python?▼

You can validate code quality metrics and enforce type consistency by running this Skill, which utilizes ruff and pyright to identify standard violations and type errors, outputting a quality score with actionable insights.

Can I get a quality score and actionable recommendations after a security scan?▼

Yes, after executing a security scan, you receive automated reports containing quality scores and actionable recommendations to remediate identified vulnerabilities and code quality issues.

Why does my code quality scan require ruff and pyright?▼

Your code quality scan requires ruff and pyright because they enforce coding standards and verify type consistency, which are essential components for calculating accurate quality metrics and identifying vulnerabilities.