security_scan

Aggregate security scanner results into a prioritized summary with per-scanner status.

Updated Feb 24, 2026

Search Tags:#security #sast #privacy #scanning #risk-analysis #dependency-audit

Ready to run

npx skills add https://github.com/binan-maker/QRS --skill security-scan-binan-maker

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/binan-maker/QRS/tree/main/.local/skills/security_scan
Command: npx skills add https://github.com/binan-maker/QRS --skill security-scan-binan-maker

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill consolidates multiple security scans (dependency audit, SAST, and privacy/dataflow analysis) into one concise, prioritized security summary to help engineering teams identify and remediate high-risk issues quickly.

Core Features & Use Cases

Unified visibility: Run dependency auditing, static analysis, and dataflow privacy checks in parallel to surface vulnerabilities and policy violations.
Resilient orchestration: If any scanner fails, the overall scan continues and returns a structured report with per-scanner status and fallback results.
Use Case: In a CI pipeline, trigger all three scanners on a code change and present the most critical findings at the top of the report.

Quick Start

Trigger the security_scan skill in your CI workflow to execute all three scanners in parallel and return a prioritized summary of findings.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I consolidate SAST and dependency audit results into a single report?▼

You can consolidate SAST, dependency audit, and privacy dataflow findings by running an aggregator that executes scanners in parallel and returns a concise, prioritized security summary report.

What is the best way to prioritize security scan findings in a CI pipeline?▼

Prioritize security scan findings by orchestrating parallel scans on code changes and presenting the most critical vulnerabilities and policy violations at the top of a compact summary payload.

Can I use parallel security scanners if one fails during the CI workflow?▼

Yes, resilient orchestration ensures that if any security scanner fails, the overall scan continues and returns a structured report with per-scanner status and fallback results.

How do I surface dependency issues and static code findings together?▼

Aggregate multiple security scans into one unified view to surface dependency issues and static code findings, ensuring high-risk vulnerabilities and policy violations are remediated quickly.

Does this security scanning approach handle privacy and dataflow analysis?▼

Yes, the security scanning approach explicitly handles privacy and dataflow analysis checks alongside dependency auditing and static analysis to identify policy violations.

What are the limitations of running multiple security scans in parallel?▼

If a scanner fails, limitations include relying on fallback results within the structured report, though the overall scan continues to provide a prioritized summary.