security-scan

Audit codebases for common security vulnerabilities and generate prioritized reports.

1|Updated Feb 1, 2026
One-click install
npx skills add https://github.com/eroslifestyle/Claude-Orchestrator-Plugin --skill security-scan-eroslifestyle
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/eroslifestyle/Claude-Orchestrator-Plugin/tree/main/github-package/skills/security-scan
Command: npx skills add https://github.com/eroslifestyle/Claude-Orchestrator-Plugin --skill security-scan-eroslifestyle

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies common security vulnerabilities within your codebase, helping to prevent potential breaches and protect sensitive data.

Core Features & Use Cases

  • Vulnerability Detection: Scans for hardcoded secrets, SQL injection, XSS, insecure dependencies, and more, based on OWASP guidelines.
  • Prioritized Reporting: Generates a detailed report of findings, ranked by severity, with actionable remediation steps.
  • Use Case: Before deploying new code, run a security scan to proactively identify and fix critical vulnerabilities like exposed API keys or potential SQL injection flaws.

Quick Start

Run a security scan on the entire project.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an automated security audit on my codebase to find vulnerabilities?

An automated security audit scans your codebase to identify common vulnerabilities like hardcoded secrets, SQL injection, and XSS. It uses parallel Grep scans and delegates deep analysis to an expert agent, producing a prioritized findings report with actionable remediation steps.

What types of security vulnerabilities can an automated code scan detect?

An automated code scan detects common security vulnerabilities including hardcoded secrets, SQL injection, cross-site scripting (XSS), and insecure dependencies. Detection is based on OWASP guidelines to help prevent potential breaches and protect sensitive user data.

Does an automated security scan provide actionable steps to fix detected vulnerabilities?

Yes, an automated security scan generates a prioritized findings report ranked by severity. This report includes actionable remediation steps for each identified vulnerability, allowing you to proactively fix critical issues like exposed API keys before deploying new code.

Can I use this approach to check for insecure dependencies and hardcoded secrets before deployment?

Yes, you can run a security scan on your entire project before deploying new code. This proactively identifies and helps fix critical vulnerabilities such as exposed API keys, hardcoded secrets, SQL injection flaws, and insecure dependencies.

How does the security scan mechanism work to identify OWASP related code issues?

The security scan mechanism works by utilizing parallel Grep scans across the codebase to locate potential vulnerabilities. It then delegates deep analysis of these findings to an expert agent, ensuring thorough identification of OWASP-related code issues.