security-analysis

Coordinate security analysis across multi-language codebases with vulnerability scanning and remediation planning.

5|Updated Dec 15, 2025
One-click install
npx skills add https://github.com/d4rkNinja/code-guardian --skill security-analysis-d4rkninja
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-analysis
Source: https://github.com/d4rkNinja/code-guardian/tree/main/sec-workspace/skills
Command: npx skills add https://github.com/d4rkNinja/code-guardian --skill security-analysis-d4rkninja

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Security Analysis Skill identifies the technology stack of a codebase and orchestrates targeted vulnerability sub-skills to deliver a comprehensive security assessment.

Core Features & Use Cases

  • Discover languages, frameworks, and dependencies to map the technology landscape.
  • Orchestrate phase-based vulnerability scans, risk scoring, and remediation planning using specialized sub-skills.
  • Generate actionable security briefs and prioritized remediation plans for multi-repo environments.

Quick Start

Identify the project’s tech stack and trigger the security assessment workflow, delegating to sub-skills as needed.

Frequently Asked Questions about security-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a vulnerability scan across a multi-language codebase with diverse tech stacks?

To run a vulnerability scan across a multi-language codebase, this Skill identifies the diverse tech stacks and orchestrates specialized sub-skills to coordinate discovery, scanning, and risk assessment. It maps dependencies to deliver a comprehensive security analysis.

What is the best way to coordinate security analysis and remediation planning for multiple repositories?

The best way to coordinate security analysis for multiple repositories is to trigger the assessment workflow to discover dependencies, apply risk scoring, and generate prioritized remediation plans. It produces actionable security briefs for multi-repo environments.

Does this security analysis approach require specific dependencies or YAML configuration to work?

This security analysis approach requires YAML frontmatter with a name and description to load Markdown body activation instructions. It operates without external dependencies and optionally supports execution using resources placed in scripts, references, and assets directories.

Can I assess security risks and vulnerabilities automatically for frameworks I am already using?

Yes, you can assess security risks automatically for frameworks you are using. The Skill discovers your existing languages and dependencies to map the technology landscape, then delegates targeted vulnerability sub-skills to evaluate and score risks.

How does risk assessment work when scanning diverse dependency trees in a codebase?

Risk assessment works by orchestrating phase-based vulnerability scans across your codebase's dependency trees. It coordinates specialized sub-skills to identify threats, score risks, and formulate a structured remediation plan based on the discovered tech stack.