skills.rest
not-subhu
not-subhuCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Orchestrate dependency audits, static application security testing, and privacy dataflow analysis.

Updated Jun 30, 2026
Search Tags:#vulnerability assessment#sast#security scanning#dependency audit#hounddog scan
One-click install
npx skills add https://github.com/not-subhu/screech --skill security-scan-not-subhu
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/not-subhu/screech/tree/main/.local/skills/security-scan
Command: npx skills add https://github.com/not-subhu/screech --skill security-scan-not-subhu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the execution of multiple security scanning tools and provides a concise summary of security findings, prioritizing critical and high-risk issues.

Core Features & Use Cases

  • Automated Security Scanning: Orchestrate multiple scans to detect vulnerabilities across different layers of the application stack.
  • Concise Summary: Offer a prioritized summary of critical and high-risk findings for quick review.
  • Use Case: Before deploying a new application, use this Skill to ensure that all security standards are met and critical issues are addressed.

Quick Start

Use the security-scan skill to perform a full security scan on the current project.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning and dependency audits before deployment?▼

Automate security scanning by orchestrating dependency audits, static application security testing, and privacy dataflow analysis. This identifies vulnerabilities across application layers, providing a prioritized summary of critical issues to ensure security standards are met before deployment.

What is the best way to run static application security testing and summarize findings?▼

Run static application security testing by orchestrating multiple scanning tools to detect vulnerabilities across your stack. The process generates a concise summary report, prioritizing critical and high-risk findings for quick developer review and remediation.

Can I use automated vulnerability assessment to check for high-risk issues in my codebase?▼

Yes, you can use automated vulnerability assessment to scan your codebase. It orchestrates dependency audits and static analysis to detect vulnerabilities, delivering a prioritized summary of critical and high-risk findings for quick remediation.

Do I need multiple scanning tools to perform comprehensive dependency audits and dataflow analysis?▼

Yes, comprehensive dependency audits and privacy dataflow analysis require multiple scanning tools for full coverage. This Skill orchestrates these tools together to detect vulnerabilities across different layers and summarizes the security findings.

What does a comprehensive security scan include for software applications?▼

A comprehensive security scan includes dependency audits, static application security testing, and privacy dataflow analysis. It automates execution across application layers to identify vulnerabilities and delivers a concise summary prioritizing critical issues.

How does privacy dataflow analysis work during automated security scans?▼

Privacy dataflow analysis works during automated security scans by tracing sensitive data through the application stack alongside dependency audits and static testing. It identifies potential privacy vulnerabilities and contributes to a prioritized summary of findings.

Related Skills

Explore More Software Engineering Skills→
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
vecearvecear

dependency-vulnerability-triage

Convert npm audit and Snyk reports into prioritized patch plans.

Community
Advanced
SjdjdiejdrirhdkjejSjdjdiejdrirhdkjej

optimization-phase

Run post-implementation quality gates and generate reports before release.

Community
Advanced
rnavarychrnavarych
14

security-testing

Automate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.

Community
Advanced