skills.rest
jadecli
jadecliOFFICIAL
Explore all skills by this author →
GitHub

security-scan

Scan spider code and data for security vulnerabilities and generate a JSON report.

1|1|Updated Mar 27, 2026
Search Tags:#security#injection#plugins#scanning#pii#exfiltration#ssrf
One-click install
npx skills add https://github.com/jadecli/researchers --skill security-scan-jadecli
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/jadecli/researchers/tree/main/claude-code-security-review/.claude/skills/security-scan
Command: npx skills add https://github.com/jadecli/researchers --skill security-scan-jadecli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Run a comprehensive security audit on spider code, crawled data, and generated plugins to identify vulnerabilities and misconfigurations.

Core Features & Use Cases

  • SSRF Scan: Detect vulnerability patterns in spider files and configuration.
  • PII Scan: Identify exposed personal data in crawled data and artifacts.
  • Injection Scan: Check for unsafe constructions and eval-like patterns.
  • Exfiltration Scan: Audit pipelines and data flows for exfiltration vectors.
  • Plugin Audit: Review generated plugins for risky hooks and credentials.
  • Use Case: Security teams validate code and data pipelines before deployment.

Quick Start

Run a full security scan on the project to generate a JSON findings report.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan spider code for SSRF vulnerabilities and exposed PII?▼

Spider code security scanning identifies SSRF vulnerabilities and exposed PII by auditing spider files, crawled data, and configurations for risky patterns. It generates a JSON report with severity breakdowns and hardening recommendations for detected issues.

What is the best way to audit generated plugins for risky hooks and credentials?▼

Plugin security auditing reviews generated plugins for risky hooks, exposed credentials, and unsafe constructions. This Skill identifies injection patterns and exfiltration vectors, producing a JSON report with severity breakdowns and hardening recommendations.

How do I check data pipelines for exfiltration vectors and injection patterns?▼

Data pipeline security checks trace data flows for unsafe eval-like constructions and unauthorized exfiltration vectors. This Skill runs injection and exfiltration scans across codebases and pipelines, outputting a JSON report with total issues and findings.

Does this security scan work on crawled data and generated plugins without extra dependencies?▼

Yes, this security scan operates directly on spider code, crawled data, and generated plugins without requiring external dependencies. It applies SSRF, PII, injection, exfiltration, and plugin audit scopes to validate codebases and data pipelines before deployment.

What does a spider code security audit report include?▼

A spider code security audit report includes scan date, scanners run, total issues, severity breakdown, and detailed findings. This Skill generates a structured JSON report covering identified vulnerabilities and hardening recommendations across all scanned scopes.

Related Skills

Explore More Software Engineering Skills→
ActiveInferenceInstituteActiveInferenceInstitute
30

gnn-security-validation

Audit GNN pipeline security and validate access control for generated code.

Community
Advanced
EndUser123EndUser123

ai-pi-nv-kimi

Invoke Kimi K2.5 via NVIDIA Pi to assess targets and output JSON findings.

Community
Intermediate
uphiagouphiago
1.1k

hunt-wordpress

Detect critical WordPress vulnerabilities during penetration testing and reconnaissance.

Community
Advanced
duc01226duc01226
7

security-review

Audit code changes for security vulnerabilities and OWASP Top 10 alignment.

Community
Advanced