security-scan

Name: security-scan
Availability: InStock
Author: pixl

Scan code repositories and container images for secrets, OWASP Top 10 vulnerabilities, dependency CVEs, and RBAC misconfigurations.

2|Updated Mar 16, 2026

Search Tags:#security #owasp #rbac #secrets #scan #cve

Ready to run

npx skills add https://github.com/hamzaPixl/pixl-ai --skill security-scan-hamzapixl

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/hamzaPixl/pixl-ai/tree/main/packages/crew/skills/security-scan
Command: npx skills add https://github.com/hamzaPixl/pixl-ai --skill security-scan-hamzapixl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Manual security assessments are time‑consuming and error‑prone, often missing hidden secrets, known vulnerability patterns, outdated dependencies, or misconfigured access controls.

Core Features & Use Cases

Detect hard‑coded secrets, private keys, and exposed credentials.
Identify OWASP Top 10 vulnerability patterns in code.
Audit dependency CVEs across Node.js, Python, and Go ecosystems.
Verify RBAC implementation and flag unauthenticated routes.
Ideal for developers and DevOps teams needing a quick, comprehensive security audit of repositories or container images.

Quick Start

Run the security-scan skill with the desired scope, for example security-scan full .

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a code repository for hard-coded secrets and OWASP vulnerabilities?▼

You can detect hard-coded secrets and OWASP Top 10 vulnerabilities by running an automated security scan that uses built-in Bash and Grep commands to identify exposed credentials and known vulnerability patterns across your project directory.

Can I audit dependency CVEs across Node.js, Python, and Go projects?▼

Yes, you can audit dependency CVEs across Node.js, Python, and Go ecosystems by running an automated security scan that utilizes npm, pip, and go audit tools to identify known vulnerabilities in your project dependencies.

Does automated security scanning work on container images and local directories?▼

Automated security scanning works on container images and any project directory, allowing developers and DevOps teams to perform comprehensive vulnerability assessments and detect misconfigured access controls across different environments.

How do I verify RBAC implementation and flag unauthenticated routes?▼

To verify RBAC implementation and flag unauthenticated routes, an automated security scan checks your project directory for access control misconfigurations, helping identify routes that lack proper authentication.

Can I configure severity thresholds and module exclusions for a vulnerability assessment?▼

Yes, you can configure severity thresholds and module exclusions for a vulnerability assessment, allowing the automated security scan to respect your specific scope and filter out unnecessary module checks.