skills.rest
BoardPandas
BoardPandasOFFICIAL
Explore all skills by this author →
GitHub

security-scan

Scan codebases for OWASP Top 10 vulnerabilities, secrets, and dependency issues.

Updated Mar 7, 2026
Search Tags:#security#vulnerability#owasp#audit#secrets#code scan
One-click install
npx skills add https://github.com/BoardPandas/project-coder --skill security-scan-boardpandas
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/BoardPandas/project-coder/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/BoardPandas/project-coder --skill security-scan-boardpandas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies and mitigates security vulnerabilities within your codebase, ensuring the integrity and safety of your software before deployment or after critical changes.

Core Features & Use Cases

  • Secrets Detection: Scans for hardcoded API keys, tokens, and passwords.
  • OWASP Top 10 Analysis: Checks for common web vulnerabilities like injection, broken authentication, and XSS.
  • Dependency Vulnerability Scanning: Identifies known security flaws in your project's dependencies.
  • Input Validation Checks: Assesses how user inputs are handled to prevent malicious data processing.
  • Use Case: Before releasing a new version of your web application, run a security scan to ensure no secrets are exposed and that common vulnerabilities are addressed.

Quick Start

Run a security scan on the entire codebase.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a comprehensive security audit on my codebase before a release?▼

To perform a comprehensive security audit before a release, you can scan your codebase to detect hardcoded secrets, analyze dependency vulnerabilities, check input validation, and identify OWASP Top 10 issues using systematic file scanning and pattern matching.

What is the best way to scan for hardcoded API keys and secrets in my source code?▼

The best way to scan for hardcoded API keys and secrets is to run an automated detection tool that systematically scans files using pattern matching to identify exposed tokens, passwords, and keys across your project.

How does OWASP Top 10 vulnerability analysis work for web applications?▼

OWASP Top 10 analysis works by systematically scanning your source files to identify patterns associated with common web vulnerabilities like injection, broken authentication, and cross-site scripting (XSS) before deployment.

Can I check for known security flaws in my project dependencies?▼

Yes, you can check for known security flaws in your project dependencies by running a dependency vulnerability analysis that identifies outdated or compromised packages within your codebase.

When do I need to run an input validation check on my code?▼

You need to run an input validation check after significant security-related code modifications to assess how user inputs are handled and prevent malicious data processing in your application.

Related Skills

Explore More Software Engineering Skills→
paradox123paradox123

context-bootstrap

Collect repository structure, runnable commands, and architecture anchors at startup.

Community
Intermediate
micaelmaltamicaelmalta
1

security-reviewer

Identify and remediate security vulnerabilities across code, configuration, and architecture.

Community
Advanced
MichelMokbelMichelMokbel

security-audit

Scan software projects for CVEs, injection flaws, and hardcoded secrets.

Community
Advanced
VSF-QC-TTSVSF-QC-TTS

common-dast-tooling

Standardize dynamic application security testing across web applications and APIs.

Official
Advanced