security-scan

Scan codebases for OWASP top 10 issues, exposed secrets, and dependency vulnerabilities.

Updated Jun 21, 2026
One-click install
npx skills add https://github.com/apexradius/agentic-os --skill security-scan-apexradius
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/apexradius/agentic-os/tree/main/skills/security-scan
Command: npx skills add https://github.com/apexradius/agentic-os --skill security-scan-apexradius

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of scanning codebases for a variety of security vulnerabilities, including OWASP top 10, exposed secrets, dependency vulnerabilities, and missing security headers.

Core Features & Use Cases

  • Security Vulnerability Scanning: Identifies common security issues like SQL injection, XSS, command injection, authentication flaws, and more.
  • Dependency Checks: Audits dependencies for known vulnerabilities and unmaintained packages.
  • Severity Calibration: Classifies findings by severity level (Critical, High, Medium, Low).
  • False Positive Verification: Allows verification of false positives to ensure accurate results.
  • Use Case: Integrate this Skill into your CI/CD pipeline to automatically scan code changes for security issues before deployment.

Quick Start

Run the security-scan skill on your codebase to automatically scan for vulnerabilities.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning for vulnerabilities in my codebase?

Automate security scanning by running this Skill to detect vulnerabilities in your codebase, covering OWASP top 10 issues, exposed secrets, and dependency flaws. It analyzes source code and audits dependencies to identify missing security headers and classify findings by severity.

What does dependency vulnerability detection cover during a code audit?

Dependency vulnerability detection during a code audit covers scanning dependencies for known vulnerabilities and unmaintained packages. It evaluates your project's libraries to pinpoint security flaws and flags them alongside source code issues.

Can I integrate vulnerability detection into a CI/CD pipeline?

Yes, you can integrate vulnerability detection into a CI/CD pipeline. The Skill automatically scans code changes for security issues and dependency vulnerabilities before deployment, making it suitable for continuous security audits.

How are security vulnerabilities classified by severity during a scan?

Security vulnerabilities are classified by severity during a scan into Critical, High, Medium, and Low levels. This severity calibration helps prioritize remediation efforts for OWASP top 10 issues and dependency vulnerabilities.

What is the best way to handle false positives from security scanning?

The best way to handle false positives from security scanning is through the Skill's false positive verification feature. It allows you to verify and filter out inaccurate findings, ensuring your security audit results are accurate.