security_scan

Name: security_scan
Availability: InStock
Author: l8yh1

Run three security scanners and compile a prioritized vulnerability report.

Updated Aug 23, 2026

Search Tags:#security #reporting #sast #privacy #scanning #dataflow #dependency-audit

Ready to run

npx skills add https://github.com/l8yh1/sainxbot --skill security-scan-l8yh1

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/l8yh1/sainxbot/tree/main/.local/skills/security_scan
Command: npx skills add https://github.com/l8yh1/sainxbot --skill security-scan-l8yh1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates three security scans (dependency audit, SAST, and dataflow/hounddog) and returns a concise, prioritized vulnerability report to reduce risk and manual review time.

Core Features & Use Cases

Parallel execution of runDependencyAudit(), runSastScan(), and runHoundDogScan() with graceful handling of per-scanner failures.
Minimal, structured output including counts by severity and key vulnerability details across dependencies, code, and data flows.
Use in CI pipelines or ad-hoc security reviews to quickly surface critical findings for remediation.

Quick Start

Run the security_scan skill against your repository to generate a prioritized security summary.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security scanning and generate a prioritized vulnerability report?▼

Automate security scanning by running dependency audit, SAST, and dataflow scanners in parallel, compiling a prioritized vulnerability report with severity counts and detailed findings.

What is a combined SAST and dependency audit scan for CI pipelines?▼

A combined SAST and dependency audit scan runs static analysis and dependency checks simultaneously against codebases, returning a structured payload with vulnerability counts and key details for remediation.

Can I run dependency, SAST, and dataflow scans in parallel without failing the entire pipeline?▼

Yes, you can run dependency, SAST, and dataflow scans in parallel with per-scanner failure tolerance, ensuring the pipeline continues and generates a report even if one scanner fails.

What's the best way to identify dataflow and privacy issues in my codebase?▼

The best way to identify dataflow and privacy issues is using an automated dataflow scanner that traces data movements, surfacing critical findings within a structured vulnerability report.

Why does my security scanner return incomplete vulnerability findings when one tool fails?▼

Security scanning with per-scanner failure tolerance returns incomplete vulnerability findings when one tool fails, capturing available results from successful scanners rather than halting execution entirely.