security-scan

Scan codebases for security compliance and generate remediation specifications.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/COG-GTM/devinclaw --skill security-scan-cog-gtm
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/COG-GTM/devinclaw/tree/main/skills/security-scan
Command: npx skills add https://github.com/COG-GTM/devinclaw --skill security-scan-cog-gtm

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the detection and remediation of security vulnerabilities and compliance violations in codebases, ensuring adherence to industry standards and regulatory requirements.

Core Features & Use Cases

  • Comprehensive Scanning: Detects violations against CIS Benchmarks, SOC 2, ISO 27001, and cloud security compliance standards.
  • Automated Remediation: Generates specifications and uses AI to fix identified security issues.
  • Use Case: When preparing for a compliance audit, use this Skill to scan your enterprise application, identify all security gaps, and automatically generate and apply fixes, producing a detailed compliance report.

Quick Start

Use the security-scan skill to scan the repository at 'https://github.com/example/myapp.git' for CIS Benchmark violations.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for CIS Benchmark and ISO 27001 compliance violations?

To scan your codebase for CIS Benchmark and ISO 27001 compliance violations, this Skill automates the detection of security gaps against industry standards. It analyzes your repository to identify vulnerabilities and generates a detailed compliance report.

Can I automate the remediation of vulnerabilities identified during a security compliance scan?

You can automate the remediation of vulnerabilities identified during a security compliance scan. The Skill generates SDD specifications and executes AI sessions to apply code fixes for the detected security issues automatically.

Does this tool validate Zero Trust architecture principles in cloud security standards?

Yes, this tool validates Zero Trust architecture principles in cloud security standards. It specifically checks your codebase configurations to ensure adherence to Zero Trust requirements alongside SOC 2 and other regulatory frameworks.

What is the best way to prepare for a SOC 2 compliance audit using automated vulnerability scanning?

The best way to prepare for a SOC 2 compliance audit using automated vulnerability scanning is to run this Skill against your enterprise application. It identifies all security gaps, automatically applies fixes, and produces the required detailed compliance report.

How does automated security scanning handle compliance reporting for multiple regulatory frameworks?

Automated security scanning handles compliance reporting for multiple regulatory frameworks by evaluating your codebase against CIS Benchmarks, SOC 2, ISO 27001, and cloud standards simultaneously. It then consolidates the findings into a single detailed compliance report.

Do I need to provide a specific repository URL to start a vulnerability scanning session?

Yes, you need to provide a specific repository URL to start a vulnerability scanning session. The Skill requires a target repository link, such as a GitHub URL, to analyze your codebase for security compliance violations and generate remediation specifications.