Scan codebases for OWASP Top 10 vulnerabilities and code quality issues.
npx skills add https://github.com/YH-05/finance --skill scan-yh-05
Please help me install this Agent Skill. Skill: scan Source: https://github.com/YH-05/finance/tree/main/.claude/skills/scan Command: npx skills add https://github.com/YH-05/finance --skill scan-yh-05
This Skill addresses the critical need for robust security and quality assurance in software development by proactively identifying vulnerabilities and code quality issues.
Run a comprehensive security and quality scan on the project.
High-intent search queries and answers about installing and using this skill.
You can scan for OWASP Top 10 vulnerabilities by running this Skill, which uses bandit and pip-audit to identify security issues and common CWEs, then generates a detailed report with actionable remediation recommendations.
The best way to validate code quality before a pull request is to run an automated scan that enforces type consistency with pyright and coding standards with ruff, ensuring no critical vulnerabilities are introduced.
Yes, this scanner integrates directly with bandit for static application security testing and pip-audit for dependency vulnerability checking, delivering comprehensive OWASP-aligned reports and quality scores.
You can validate code quality metrics and enforce type consistency by running this Skill, which utilizes ruff and pyright to identify standard violations and type errors, outputting a quality score with actionable insights.
Yes, after executing a security scan, you receive automated reports containing quality scores and actionable recommendations to remediate identified vulnerabilities and code quality issues.
Your code quality scan requires ruff and pyright because they enforce coding standards and verify type consistency, which are essential components for calculating accurate quality metrics and identifying vulnerabilities.
Sake-TeamVerify Django applications with environment, code quality, migration, test, security, and performance checks.
carlheathAssess software and infrastructure security vulnerabilities and threats.
roanbrasilAutomate static analysis for Java, Kotlin, Python, and Rust codebases.
alex-voloshin-devAudit codebases against OWASP Web and GenAI Top 10 standards.
