skills.rest
alex-voloshin-dev
alex-voloshin-devCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scan

Automate dependency vulnerability checks, secret detection, and OWASP compliance reviews.

2|Updated Mar 19, 2026
Search Tags:#security#vulnerability#owasp#audit#compliance#secrets
One-click install
npx skills add https://github.com/alex-voloshin-dev/ai-skills --skill security-scan-alex-voloshin-dev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/alex-voloshin-dev/ai-skills/tree/main/.windsurf/skills/security-scan
Command: npx skills add https://github.com/alex-voloshin-dev/ai-skills --skill security-scan-alex-voloshin-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the risk of shipping vulnerable code by automating the detection of dependency vulnerabilities, hardcoded secrets, and common OWASP security flaws.

Core Features & Use Cases

  • Dependency Audit: Automatically scans project manifests for known CVEs across multiple languages and package managers.
  • Secrets Detection: Identifies potential hardcoded credentials and API keys using pattern matching and specialized scanning tools.
  • OWASP Compliance: Provides a structured checklist to review code against the OWASP Top 10 security risks.
  • Use Case: Run this scan before a major release to ensure no critical vulnerabilities or exposed secrets are present in the repository.

Quick Start

Use the security-scan skill to perform a full audit of the current project and generate a summary report.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security audits for my codebase?▼

Automated security audits scan project manifests for known CVEs, detect hardcoded secrets, and review OWASP compliance risks across diverse technology stacks to generate a comprehensive vulnerability report.

How do I scan my project dependencies for known vulnerabilities?▼

Dependency audits automatically scan project manifests for known CVEs across multiple languages and package managers, identifying vulnerable dependencies before a major software release.

What is the best way to detect hardcoded secrets and API keys in my repository?▼

Secrets detection identifies potential hardcoded credentials and API keys by using pattern matching and specialized scanning tools to ensure no exposed secrets are present in the codebase.

Can I use this security scan to check my code against the OWASP Top 10?▼

OWASP compliance reviews provide a structured checklist to evaluate your code against the OWASP Top 10 security risks, satisfying requirements for automated security guardrails.

Does the vulnerability check work with multiple programming languages?▼

The vulnerability check supports diverse technology stacks by scanning project manifests across multiple languages and package managers for continuous security monitoring and risk assessment.

When should I run an automated security audit in the software development lifecycle?▼

Run an automated security audit before a major release or continuously throughout the software development lifecycle to ensure no critical vulnerabilities or exposed secrets are present.

Related Skills

Explore More Software Engineering Skills→
gelowzzzgelowzzz

security-scanner

Scan code, configurations, and dependencies for OWASP Top 10:2025 vulnerabilities.

Community
Advanced
GDSDNGDSDN
3

qa-security-checklist

Scan codebases for predefined vulnerability patterns and generate severity reports.

Community
Advanced
TeiNamTeiNam
12

laravel-verification

Automate Laravel project verification for CI/CD pipelines.

Community
Advanced
jlawsjlaws
2

cmd-security-audit

Run STRIDE threat modeling and SAST vulnerability scans on codebases.

Community
Advanced