skills.rest
mehdic
mehdicCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan code changes for vulnerabilities and output a structured JSON report.

21|Updated Nov 7, 2025
Search Tags:#static analysis#code review#security#secure coding#vulnerability scan#dependency check#SAST
One-click install
npx skills add https://github.com/mehdic/bazinga --skill security-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/mehdic/bazinga/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/mehdic/bazinga --skill security-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bandit, semgrep, npm audit, eslint-plugin-security, gosec, brakeman, spotbugs, owasp dependency check, and includes scripts (resource) components.

What problem does it solve?

Manual security reviews are slow, error-prone, and often miss critical vulnerabilities. This Skill automates the detection of common security flaws, ensuring code is safer before it reaches production, saving you from costly incidents and tedious manual checks.

Core Features & Use Cases

  • Dynamic Mode Selection: Automatically switches between fast "Basic Mode" for initial reviews and comprehensive "Advanced Mode" for deeper analysis based on revision count.
  • Multi-Language Support: Scans Python, JavaScript, Go, Ruby, and Java projects using industry-standard tools like Bandit, Semgrep, npm audit, and SpotBugs.
  • Vulnerability Detection: Identifies SQL injection, XSS, hardcoded secrets, insecure dependencies, authentication bypasses, and more.
  • Use Case: As a Tech Lead, you can automatically trigger this Skill on every pull request. It will quickly flag high-severity issues in early revisions, and perform a deep dive on later revisions, ensuring no critical vulnerability slips through to production.

Quick Start

To run a basic security scan on the current codebase: export SECURITY_SCAN_MODE=basic bash .claude/skills/security-scan/scan.sh To run an advanced scan: export SECURITY_SCAN_MODE=advanced bash .claude/skills/security-scan/scan.sh

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically detect security vulnerabilities in my code?▼

Security scanning automates vulnerability detection by analyzing code for common flaws like SQL injection, XSS, and hardcoded secrets. This Skill runs industry-standard tools (Bandit, Semgrep, npm audit, gosec, brakeman, SpotBugs) across Python, JavaScript, Go, Ruby, and Java, generating a structured JSON report of findings.

Can I integrate security scanning into my pull request workflow?▼

Yes. This Skill automatically detects the code language and runs appropriate scanners on each pull request. It switches between fast basic scans for early revisions and comprehensive advanced scans for later ones, flagging high-severity issues before code reaches production.

What languages and dependency tools does this security scan support?▼

The Skill supports Python (Bandit), JavaScript (npm audit, ESLint security plugin), Go (gosec), Ruby (Brakeman), and Java (SpotBugs). It also scans dependencies across projects using OWASP Dependency Check to identify insecure libraries.

How do basic and advanced security scan modes differ?▼

Basic mode runs fast initial checks suitable for early pull request revisions, catching high-severity issues quickly. Advanced mode performs thorough analysis on later revisions, conducting deeper inspection to ensure no critical vulnerabilities slip through to production.

What security issues does this scan detect?▼

The scan identifies SQL injection, cross-site scripting (XSS), hardcoded secrets, insecure dependencies, authentication bypasses, and other common vulnerabilities. Results are output as structured JSON for downstream processing and decision-making.

Do I need to configure language detection, or does it happen automatically?▼

Language detection is automatic. The Skill determines which programming language your codebase uses and runs the appropriate security scanners without manual configuration, streamlining the review process.

Related Skills

Explore More Software Engineering Skills→
y1feng200156y1feng200156
33

vuln-scan

Scan project dependencies for known security vulnerabilities using Safety CLI and OSV-Scanner.

Community
Intermediate
pluginagentmarketplacepluginagentmarketplace
3

red-team-reporting

Generate security assessment reports from structured findings in Markdown, HTML, PDF, or DOCX.

Community
Basic
vladm3105vladm3105
16

code-review

Automate code review across multi-language repositories with static analysis and security scanning.

Community
Advanced
leonardoteodorooleonardoteodoroo

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for CI/CD security scanning.

Community
Advanced