security_scan

Scan codebases for dependency, static, and data-flow vulnerabilities.

Updated Apr 1, 2026
One-click install
npx skills add https://github.com/koya-alt/Catalyst --skill security-scan-koya-alt
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/koya-alt/Catalyst/tree/main/local/skills/security_scan
Command: npx skills add https://github.com/koya-alt/Catalyst --skill security-scan-koya-alt

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides an automated, comprehensive security assessment by running dependency vulnerability checks, static code analysis, and privacy‑focused data‑flow scanning, then delivers a concise, prioritized report that surfaces critical and high‑severity issues first.

Core Features & Use Cases

  • Parallel Orchestration: Executes three independent scanners concurrently and tolerates individual failures.
  • Unified Summary: Returns a short, prioritized list of critical/high findings with remediation guidance.
  • Use Case: Ideal for developers or security teams needing a quick, holistic security overview of a codebase before release.

Quick Start

Ask the security_scan skill to run a full scan on your repository and present the top critical findings.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a comprehensive security scan on my codebase before release?

A comprehensive codebase security scan analyzes dependency vulnerabilities, static code flaws, and data-flow privacy risks concurrently, returning a prioritized summary of critical and high-severity findings with remediation guidance.

What is data-flow privacy scanning and how does it detect vulnerabilities?

Data-flow privacy scanning tracks how sensitive information moves through a software project to identify exposure risks. It operates alongside dependency checks and static code analysis to surface high-severity findings in a unified summary.

Can I get a prioritized security summary if one of my vulnerability scanners fails?

Yes, parallel security scan orchestration tolerates individual scanner failures. If a dependency audit, static analysis, or privacy scanner fails, the process still returns a prioritized summary from the remaining successful scans.

How do I identify critical and high severity vulnerabilities in my software dependencies?

To identify critical vulnerabilities in software dependencies, run a dependency audit combined with static analysis and privacy scanning. This generates a concise prioritized list emphasizing the most severe security findings.

Does static code analysis detect privacy risks alongside dependency vulnerabilities?

Static code analysis identifies code flaws, while a separate data-flow scan handles privacy risks. Running these alongside a dependency audit provides a holistic security overview, prioritizing critical and high-severity issues.

What is the best way to get a quick holistic security overview of a repository?

The best way to get a quick holistic security overview is running a full security scan that executes dependency checks, static analysis, and privacy data-flow scanning concurrently, delivering a concise prioritized report of critical findings.