skills.rest
GDSDN
GDSDNCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan npm dependencies, ESLint code patterns, and exposed secrets for security reports.

3|Updated Feb 7, 2026
Search Tags:#code analysis#security#eslint#sast#npm audit#vulnerability scanning#secrets detection
One-click install
npx skills add https://github.com/GDSDN/kord-aios --skill security-scan-gdsdn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/GDSDN/kord-aios/tree/main/src/features/builtin-skills/kord-aios/utilities/security-scan
Command: npx skills add https://github.com/GDSDN/kord-aios --skill security-scan-gdsdn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of scanning your codebase for security vulnerabilities, insecure coding patterns, and exposed secrets, ensuring a more robust and secure application.

Core Features & Use Cases

  • Dependency Vulnerability Scanning: Identifies known vulnerabilities in your project's npm dependencies.
  • Code Security Pattern Analysis: Uses ESLint with security plugins to detect common insecure coding practices.
  • Secret Detection: Scans for accidentally committed API keys, passwords, and other sensitive information.
  • Use Case: Before merging a new feature, run this Skill to automatically identify and report any critical security flaws, preventing potential breaches and ensuring compliance.

Quick Start

Run a comprehensive security scan on the current project to identify vulnerabilities and exposed secrets.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate static application security testing for my project?▼

Automating static application security testing involves scanning npm dependencies for vulnerabilities, analyzing code with ESLint for insecure patterns, and detecting exposed secrets to generate a consolidated security report.

Can I detect committed API keys and passwords in my codebase?▼

Yes, you can detect committed API keys and passwords by running a secrets detection scan, which identifies accidentally exposed sensitive information across your project files.

How does ESLint help find insecure coding patterns?▼

ESLint helps find insecure coding patterns by running configured security plugins against your source code, automatically flagging common vulnerabilities and unsafe practices during the analysis phase.

What is the best way to scan npm dependencies for known vulnerabilities?▼

The best way to scan npm dependencies for vulnerabilities is to run an automated npm audit, which identifies known security flaws in your project packages and reports them for remediation.

Does vulnerability scanning provide a pass or fail gate impact for CI/CD?▼

Yes, vulnerability scanning provides a gate impact by consolidating findings from dependency checks, code analysis, and secret detection to determine if your project passes security requirements.

Related Skills

Explore More Software Engineering Skills→
MakisuoMakisuo
1.6k

clickhousectl-local-dev

Install and configure a local ClickHouse environment with clickhousectl.

Community
Intermediate
yaochangyuyaochangyu

security-check-dependencies

Identify and report known vulnerabilities in project dependencies across multiple ecosystems.

Community
Intermediate
alxayoalxayo
17

eslint-security-scan

Scan JavaScript/TypeScript projects for security vulnerabilities using ESLint plugins.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced