security-scan

Scan code for OWASP Top 10 vulnerabilities with severity-rated findings.

42|5|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/kazdenc/builder-skills --skill security-scan-kazdenc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/kazdenc/builder-skills/tree/main/.claude/skills/dev/review/security-scan
Command: npx skills add https://github.com/kazdenc/builder-skills --skill security-scan-kazdenc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps remediate security vulnerabilities within your codebase, preventing potential breaches and protecting sensitive data.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Scans for common and critical vulnerabilities like injection, broken authentication, and XSS.
  • Actionable Fixes: Provides specific recommendations and code examples to resolve identified issues.
  • Use Case: Before deploying a new feature, run a security scan to ensure it doesn't introduce new risks, such as SQL injection or exposed API keys.

Quick Start

Use the security-scan skill to check the file 'app.py' for vulnerabilities.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for OWASP Top 10 vulnerabilities before deployment?

Scan code for OWASP vulnerabilities by submitting your source file to the scanner. It identifies specific code patterns for injection, XSS, and broken authentication, then reports severity-rated findings with file:line references and concrete fix recommendations.

What is the best way to find SQL injection and exposed API keys in my codebase?

Finding SQL injection and exposed API keys requires a security audit of your code patterns. This scanner detects these critical risks, flags them by severity, and provides concrete remediation strategies with code examples to resolve the issues.

Does this security audit tool provide actionable fixes for cross-site scripting?

Yes, the security audit provides actionable fixes for cross-site scripting. It delivers specific recommendations and code examples to resolve identified issues, ensuring you have concrete remediation strategies for vulnerabilities found at exact file:line references.

How does the vulnerability scan report security findings?

The vulnerability scan reports security findings as severity-rated alerts with specific file:line references. It flags critical risks and offers targeted remediation strategies, allowing you to verify code security before shipping by pinpointing exact vulnerable code patterns.

When do I need to run a security scan on my source files?

Run a security scan on your source files before deploying a new feature to ensure it doesn't introduce new risks. Scanning verifies code security proactively, preventing potential breaches and protecting sensitive data by identifying vulnerabilities early.