security-scan

Audit code security for OWASP Top 10 vulnerabilities in TypeScript/Node.js projects.

Updated Jan 29, 2026
One-click install
npx skills add https://github.com/LimaTechnologies/admin-telegram-bot --skill security-scan-limatechnologies
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/LimaTechnologies/admin-telegram-bot/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/LimaTechnologies/admin-telegram-bot --skill security-scan-limatechnologies

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Audits code security to identify OWASP Top 10 vulnerabilities in a codebase.

Core Features & Use Cases

  • OWASP Coverage: Scans code for common web vulnerabilities and enforces secure coding practices.
  • Session & Validation Checks: Validates that user IDs originate from the session and ensures inputs are properly validated.
  • Audit & Reporting: Produces a summary report and actionable remediation steps.

Quick Start

Run the security scan against your project using the provided script: python .claude/skills/security-scan/scripts/scan.py path/to/your/project

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities?

To scan for OWASP Top 10 vulnerabilities, run the provided Python script against your project path. The audit identifies insecure patterns in web applications and server codebases, producing a summary report with actionable remediation steps.

What is the best way to check for insecure session validation in TypeScript?

Checking for insecure session validation involves auditing user IDs to ensure they originate from the session and verifying inputs are properly validated. This enforces secure coding practices across your TypeScript and Node.js projects.

Can I use this security audit during continuous integration?

Yes, you can use this security audit during continuous integration. It is applicable for web applications and server codebases during development and CI, detecting insecure patterns and enforcing secure coding practices automatically.

Does the code scan work with Node.js projects?

The code scan works with TypeScript and Node.js projects. It audits code security to identify OWASP Top 10 vulnerabilities, detecting insecure patterns specific to your web application and server codebase environments.

What does the security audit report include?

The security audit report includes a summary of identified OWASP Top 10 vulnerabilities and actionable remediation steps. It validates session checks and input validation to help enforce secure coding practices in your codebase.