security_scan

Run three security scanners in parallel and generate a prioritized summary.

Updated Jun 21, 2026
One-click install
npx skills add https://github.com/akhilksap2026/YMSNOW27032026 --skill security-scan-akhilksap2026
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/akhilksap2026/YMSNOW27032026/tree/main/replit/.local/skills/security_scan
Command: npx skills add https://github.com/akhilksap2026/YMSNOW27032026 --skill security-scan-akhilksap2026

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill runs three independent scanners (runDependencyAudit, runSastScan, runHoundDogScan) and returns a concise, prioritized security summary with critical/high findings first to streamline remediation.

Core Features & Use Cases

  • RunDependencyAudit() detects package/dependency vulnerabilities.
  • RunSastScan() surfaces static code findings.
  • RunHoundDogScan() analyzes privacy/dataflow risks.
  • Orchestration supports parallel execution and tolerates per-scanner failures for robust scans.
  • Applies to code reviews, PRs, and security sprints to quickly triage risk.

Quick Start

Run a full security triage by invoking all three scanners in parallel and review the summarized results.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security scan that covers dependency vulnerabilities, static code findings, and privacy dataflow risks?

This Skill orchestrates parallel security scans covering dependency audits, static code analysis, and privacy dataflow checks. It generates a prioritized summary of vulnerabilities and high-level findings with remediation guidance for quick triage.

What is the best way to triage security findings across multiple code scanners during a PR review?

Triage security findings by running dependency, SAST, and privacy scanners in parallel with per-scanner failure tolerance. This approach returns minimal structured results, prioritizing critical and high vulnerabilities to streamline code review remediation.

How does parallel scanner orchestration handle failures when analyzing a codebase?

Parallel orchestration with per-scanner failure tolerance ensures that if one scanner fails, the remaining dependency, SAST, and privacy scans still execute and return structured vulnerability results without blocking the overall security triage.

Can I use this security scan for dependency audits and static code analysis without privacy dataflow checks?

Yes, the Skill's parallel orchestration features per-scanner failure tolerance, so dependency audits and SAST scans return structured findings even if the privacy dataflow scanner fails or is excluded from the security triage workflow.

What types of vulnerabilities does a dependency audit and SAST scan detect in my codebase?

A dependency audit detects package vulnerabilities, a SAST scan surfaces static code findings, and a HoundDog scan analyzes privacy and dataflow risks. The combined security scan returns prioritized vulnerability metadata and high-level findings with remediation guidance.

Why does my security scan return partial results when a scanner fails during codebase analysis?

Partial security scan results occur because the parallel orchestration implements per-scanner failure tolerance. This ensures that if one scanner fails, the remaining dependency, SAST, or privacy scanners still execute and return their structured vulnerability findings.