security-scan

Scan JavaScript, PHP, Python, Swift, Go, and Rust code for vulnerabilities.

22|3|Updated Jan 10, 2026
One-click install
npx skills add https://github.com/fusengine/agents --skill security-scan-fusengine
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/fusengine/agents/tree/main/plugins/security-expert/skills/security-scan
Command: npx skills add https://github.com/fusengine/agents --skill security-scan-fusengine

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of identifying security vulnerabilities within your codebase, helping you proactively address risks like XSS, SQL injection, and exposed secrets.

Core Features & Use Cases

  • Multi-language Support: Scans JavaScript/TypeScript, PHP, Python, Swift/iOS, Go, and Rust.
  • OWASP Top 10 Mapping: Classifies findings according to the latest OWASP Top 10 categories.
  • Vulnerability Detection: Identifies common patterns for XSS, SQL injection, command injection, secrets, and more.
  • Use Case: Before deploying your web application, run a security scan to detect and fix potential vulnerabilities, ensuring a more secure product.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities before deployment?

This Skill scans code for security vulnerabilities by orchestrating a comprehensive workflow that detects XSS, SQL injection, command injection, and exposed secrets across multiple programming languages.

Can I scan a Python or Go project for OWASP Top 10 vulnerabilities?

Yes, you can scan Python and Go projects for vulnerabilities. The scanner identifies language-specific patterns and maps all findings directly to the latest OWASP Top 10 categories.

How does code analysis detect XSS and SQL injection risks?

Code analysis detects XSS and SQL injection by identifying recognized vulnerability patterns within the source code and mapping those findings to OWASP Top 10 security risk categories.

What types of security risks can a code vulnerability scan identify?

A code vulnerability scan identifies XSS, SQL injection, command injection, exposed secrets, and other security risks, generating a structured report of the findings.

Does the security scanner generate structured reports for detected vulnerabilities?

Yes, the security scanner generates structured reports that map detected vulnerabilities, such as XSS and injection flaws, to their corresponding OWASP Top 10 categories.

What is the best way to find exposed secrets in a Swift or Rust codebase?

The best way to find exposed secrets is to run a comprehensive security scan that automatically identifies secrets, injection flaws, and other risks across Swift/iOS and Rust projects.