security-scan

To find security vulnerabilities in a codebase, this skill combines automated pattern scanning with a structured manual deep-dive. It analyzes all major languages and configurations to identify flaws based on OWASP Top 10 and CWE criteria.

Yes, the security scanner applies across all major programming languages and configurations. It performs reconnaissance to characterize the project before running automated pattern detection and manual deep-dive analysis.

You generate an OWASP Top 10 aligned security report by running the scanner against a target directory. It produces a structured findings report with CVSS-aligned recommendations and an executive summary.

Yes, you can audit dependencies for known vulnerabilities during the code review. The workflow includes dependency auditing alongside reconnaissance, threat modeling, and manual code analysis to ensure comprehensive coverage.

The best way to map CWE and CVSS scores to findings is through a structured manual review complemented by automated detection. This skill aligns identified vulnerabilities with CWE and CVSS criteria to prioritize remediation.

A comprehensive threat modeling and code review workflow includes reconnaissance, automated pattern scanning, manual deep-dive, dependency auditing, and executive reporting. This approach ensures both high-signal detection and focused analysis of critical areas.