skills.rest
AmirEmad11
AmirEmad11COMMUNITY
Explore all skills by this author →
GitHub

security_scan

Run dependency, SAST, and dataflow scanners and summarize prioritized security findings.

Updated Apr 20, 2026
Search Tags:#code analysis#vulnerability#remediation#security scan#sast#privacy#dependency audit
One-click install
npx skills add https://github.com/AmirEmad11/instabot --skill security-scan-amiremad11
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/AmirEmad11/instabot/tree/main/.local/skills/security_scan
Command: npx skills add https://github.com/AmirEmad11/instabot --skill security-scan-amiremad11

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Running multiple security scanners separately produces fragmented, verbose output that is hard to triage. This Skill orchestrates dependency auditing, static analysis, and privacy dataflow scanning in one pass and returns a concise, severity-prioritized summary. ## Core Features & Use Cases - Parallel Multi-Scanner Orchestration: Runs runDependencyAudit, runSastScan, and runHoundDogScan concurrently with per-scanner failure tolerance. - Prioritized Findings: Reports counts by severity and surfaces critical/high findings first with file paths and short messages. - Remediation Planning: Produces a short remediation plan that clearly flags risky or breaking changes. - Use Case: Before merging a release branch, ask for a security scan to get dependency vulnerabilities, static code findings, and privacy dataflow issues consolidated into one actionable report. ## Quick Start Run a full security scan on this project and summarize the critical and high findings with a remediation plan.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a full security scan on my codebase?▼

Request a security scan and the skill runs runDependencyAudit, runSastScan, and runHoundDogScan in parallel. It returns per-scanner status, severity counts, top critical/high findings, and a short remediation plan.

What security scanners does this skill run?▼

It runs three scanners: runDependencyAudit for package and dependency vulnerabilities, runSastScan for static code findings, and runHoundDogScan for privacy and security dataflow findings.

What happens if one security scanner fails during a scan?▼

The scan uses Promise.allSettled so a single scanner failure does not fail the whole run. The failed scanner is reported with an error status while results from the other scanners are still summarized.

How are security scan results prioritized in the output?▼

Results are reported per scanner with counts by severity, followed by the top critical and high findings with file paths and short messages. A remediation plan follows, with risky or breaking changes clearly called out.

When should I use this security scanning skill?▼

Use it when security scanning is explicitly requested, such as before a release, during code review, or when auditing dependencies. It is designed for concise summaries rather than dumping full raw scanner payloads.

Related Skills

Explore More Software Engineering Skills→
lis186lis186
46

deps

Scan manifest files to inventory dependency versions and usage points.

Community
Advanced
alkampfergitalkampfergit
2

sonarcloud

Analyze and remediate SonarCloud issues on pull requests via API.

Community
Advanced
microsoftmicrosoft
808

scan-code

Scans Power Pages site source code and dependencies for security issues using opengrep and trivy.

Official
Advanced
zeljkoobrenoviczeljkoobrenovic
3

full-scan

Orchestrates seventeen Sokrates codebase scanners in dependency order and merges validated findings.

Community
Advanced