skills.rest
artsmc
artsmcCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-quality-assess

Analyze Python and JavaScript/TypeScript codebases for security vulnerabilities and vulnerable dependencies.

Updated Mar 1, 2026
Search Tags:#security#owasp#analysis#reporting#code#ci#cve
One-click install
npx skills add https://github.com/artsmc/codex-agentic --skill security-quality-assess
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-quality-assess
Source: https://github.com/artsmc/codex-agentic/tree/main/skills/security-quality-assess
Command: npx skills add https://github.com/artsmc/codex-agentic --skill security-quality-assess

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Automates security vulnerability scanning for Python and JavaScript/TypeScript codebases, identifying OWASP Top 10 vulnerabilities and known CVEs to enable proactive remediation.

Core Features & Use Cases

  • OWASP Top 10 coverage across A01-A07 with actionable findings and remediation guidance.
  • Dependency vulnerability checks against OSV for CVEs with CVSS-derived severities.
  • Comprehensive Markdown reports suitable for CI/CD integration and security reviews.
  • Suppression framework to manage false positives with expiry, approvals, and per-file scoping.

Quick Start

Run the security assessment against a target project directory to generate a Markdown report.

Frequently Asked Questions about security-quality-assess

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Python and JavaScript security vulnerability scanning in CI?▼

Automate security vulnerability scanning by analyzing Python and JavaScript source files, parsing lockfiles, and querying OSV for CVEs to output a comprehensive Markdown report for CI pipelines.

How does OSV querying work for checking vulnerable dependencies?▼

OSV querying works by parsing project lockfiles to extract dependency versions, querying the OSV database for known CVEs, and reporting vulnerabilities with CVSS-derived severities in the final Markdown assessment.

Can I suppress false positives found during codebase security analysis?▼

You can suppress false positives found during codebase security analysis using a dedicated suppression schema that supports per-file scoping, approvals, and expirations to manage findings accurately.

Does this security scanner support both Python and JavaScript codebases?▼

Yes, this security scanner supports Python and JavaScript codebases by implementing multi-stage parsers to discover, analyze, and report OWASP Top 10 vulnerabilities and dependency CVEs.

What is the best way to generate a security report for OWASP Top 10 coverage?▼

The best way to generate a security report for OWASP Top 10 coverage is running an automated scan that evaluates A01-A07 vulnerabilities and produces a comprehensive Markdown document with actionable findings and remediation guidance.

What are the limitations of using OSV caching for CVE analysis?▼

OSV caching improves CVE analysis speed by storing vulnerability data locally, but it may delay detecting newly published CVEs depending on when the cache was last refreshed before the reporting pipeline executes.

Related Skills

Explore More Software Engineering Skills→
amanhsnamanhsn

CI/CD Pipeline Builder

Detect repository stacks and generate CI pipeline templates for GitHub Actions and GitLab CI.

Community
Intermediate
dapperdiversdapperdivers
1

report-generator

Generate structured markdown penetration test reports from JSON security scan findings.

Community
Intermediate
yasarremreyasarremre

reviewer

Audit code changes for quality, security, and best practices.

Community
Advanced
HouseGarofaloHouseGarofalo
3

security-scanner

Scan container images, dependencies, and IaC for security vulnerabilities.

Official
Advanced