script-scanner

Scan shell, Python, JavaScript, and TypeScript scripts for security and reliability issues.

Updated May 20, 2026
One-click install
npx skills add https://github.com/Jayarr03/Codex_ThreatModel_Skills --skill script-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: script-scanner
Source: https://github.com/Jayarr03/Codex_ThreatModel_Skills/tree/main/skills/script-scanner
Command: npx skills add https://github.com/Jayarr03/Codex_ThreatModel_Skills --skill script-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of reviewing scripts for security vulnerabilities, design flaws, and reliability issues, saving time and improving code quality.

Core Features & Use Cases

  • Security Vulnerability Scanning: Identifies common security issues in scripts such as injection, file access, and secret exposure.
  • Reliability Checks: Inspects for silent failures, weak error handling, and unbounded resource use.
  • Use Case: Use the script-scanner to review a script and receive a concise report highlighting potential security and reliability concerns.

Quick Start

Use the script-scanner to review the script 'script_to_check.sh'.

Frequently Asked Questions about script-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability scanning for shell and Python scripts?

To automate security vulnerability scanning for shell and Python scripts, you can use an automated script scanner to identify injection risks, file access issues, and secret exposure without manual code inspection. It highlights potential security concerns in a concise report.

What is script reliability checking and how does it find silent failures?

Script reliability checking is the process of automatically inspecting code for silent failures, weak error handling, and unbounded resource use. It reviews scripts to pinpoint design flaws and reliability issues that could cause unexpected runtime behavior.

Can I review JavaScript and TypeScript code for security issues without manual inspection?

Yes, you can review JavaScript and TypeScript code for security issues without manual inspection by using an automated script scanner. It analyzes the code to detect common vulnerabilities and reliability flaws, generating a report of potential problems.

Do I need specific scripting languages installed to run a script security audit?

Yes, you need specific scripting languages present on your system to run a script security audit. The scanner requires the relevant language environments to be installed so it can accurately analyze the scripts for vulnerabilities and reliability issues.

What types of code vulnerabilities can an automated script scanner detect?

An automated script scanner can detect code vulnerabilities such as injection flaws, unauthorized file access, and secret exposure. It also identifies reliability issues including silent failures, weak error handling, and unbounded resource consumption.