skills.rest
hamzaPixl
hamzaPixlCOMMUNITY
Explore all skills by this author →
Website𝕏@pixlHamzaGitHub

security-scan

Scan code repositories and container images for secrets, OWASP Top 10 vulnerabilities, dependency CVEs, and RBAC misconfigurations.

2|Updated Mar 16, 2026
Search Tags:#security#owasp#rbac#secrets#scan#cve
One-click install
npx skills add https://github.com/hamzaPixl/pixl-ai --skill security-scan-hamzapixl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/hamzaPixl/pixl-ai/tree/main/packages/crew/skills/security-scan
Command: npx skills add https://github.com/hamzaPixl/pixl-ai --skill security-scan-hamzapixl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Manual security assessments are time‑consuming and error‑prone, often missing hidden secrets, known vulnerability patterns, outdated dependencies, or misconfigured access controls.

Core Features & Use Cases

  • Detect hard‑coded secrets, private keys, and exposed credentials.
  • Identify OWASP Top 10 vulnerability patterns in code.
  • Audit dependency CVEs across Node.js, Python, and Go ecosystems.
  • Verify RBAC implementation and flag unauthenticated routes.
  • Ideal for developers and DevOps teams needing a quick, comprehensive security audit of repositories or container images.

Quick Start

Run the security-scan skill with the desired scope, for example security-scan full .

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a code repository for hard-coded secrets and OWASP vulnerabilities?▼

You can detect hard-coded secrets and OWASP Top 10 vulnerabilities by running an automated security scan that uses built-in Bash and Grep commands to identify exposed credentials and known vulnerability patterns across your project directory.

Can I audit dependency CVEs across Node.js, Python, and Go projects?▼

Yes, you can audit dependency CVEs across Node.js, Python, and Go ecosystems by running an automated security scan that utilizes npm, pip, and go audit tools to identify known vulnerabilities in your project dependencies.

Does automated security scanning work on container images and local directories?▼

Automated security scanning works on container images and any project directory, allowing developers and DevOps teams to perform comprehensive vulnerability assessments and detect misconfigured access controls across different environments.

How do I verify RBAC implementation and flag unauthenticated routes?▼

To verify RBAC implementation and flag unauthenticated routes, an automated security scan checks your project directory for access control misconfigurations, helping identify routes that lack proper authentication.

Can I configure severity thresholds and module exclusions for a vulnerability assessment?▼

Yes, you can configure severity thresholds and module exclusions for a vulnerability assessment, allowing the automated security scan to respect your specific scope and filter out unnecessary module checks.

Related Skills

Explore More Software Engineering Skills→
woohyun212woohyun212
21

dependency-audit

Scan project dependencies for known vulnerabilities using npm audit, pip-audit, and trivy.

Community
Intermediate
qiphonqiphon
2

Verification & Quality Assurance

Score truth, validate code, and rollback failed changes via CLI.

Community
Intermediate
martinholovskymartinholovsky
45

CI/CD Pipeline Security Expert

Automate CI/CD pipeline security hardening with GitHub Actions.

Community
Advanced
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced