Run dependency audits, SAST, and privacy checks to summarize critical security risks.
npx skills add https://github.com/kvm9-dev/susanoo --skill security-scan-kvm9-dev
Please help me install this Agent Skill. Skill: security_scan Source: https://github.com/kvm9-dev/susanoo/tree/main/.local/skills/security_scan Command: npx skills add https://github.com/kvm9-dev/susanoo --skill security-scan-kvm9-dev
This Skill helps you quickly identify security risks by running dependency, code, and privacy/security scans and summarizing the most critical findings first.
Use the security_scan skill to run dependency audit, SAST, and hound-dog style privacy/security checks and get a prioritized summary of the most critical and high findings.
High-intent search queries and answers about installing and using this skill.
Run a security scan to execute static application security testing, dependency auditing, and privacy dataflow checks concurrently. This process identifies vulnerabilities across build artifacts and source code, returning a prioritized summary of critical and high issues with actionable remediation guidance.
Prioritized vulnerability reporting is achieved by severity-bucketing findings and surfacing critical and high issues before lower severities. The security scan correlates dependency vulnerabilities, SAST findings, and privacy dataflow rules to generate a concise, ordered view of your most urgent risks.
Yes, the security scan runs privacy dataflow checks in parallel with static code analysis and dependency audits. It uses failure-tolerant orchestration to ensure all checks complete independently, correlating the results into a single structured report with remediation guidance.
Yes, the SAST scan provides a short remediation plan that clearly calls out risky or breaking changes. This actionable guidance accompanies the severity-bucketed vulnerability report, helping you resolve critical and high security findings fast.
The security scan uses failure-tolerant orchestration, meaning if one check fails, the remaining dependency audits, SAST, and privacy dataflow scans continue running. This ensures you still receive a structured report of any critical and high vulnerabilities discovered.
harperaaAudit Node.js/npm dependency trees for vulnerabilities and supply chain risks.
vecearConvert npm audit and Snyk reports into prioritized patch plans.
pantheon-orgGenerate Declarative and Scripted Jenkinsfiles with stages, agents, and security scanning.
icartshAnalyze .NET solutions for code quality, security, and dependency issues.
