security-scan

Execute dependency, SAST, and privacy dataflow scans with prioritized findings.

1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/patriotnewsactivism/ARIA --skill security-scan-patriotnewsactivism
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/patriotnewsactivism/ARIA/tree/main/.local/skills/security-scan
Command: npx skills add https://github.com/patriotnewsactivism/ARIA --skill security-scan-patriotnewsactivism

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a concise, prioritized security summary, with critical/high findings first, to streamline the security scanning process.

Core Features & Use Cases

  • Integrated Scanning: Combines three scans - dependency audit, SAST, and privacy/security dataflow - into one summary.
  • Customizable Output: Returns results with status, count by severity, and top findings, including remediation advice.
  • Use Case: When security scanning is required, use this Skill to quickly assess potential vulnerabilities in your system.

Quick Start

Run the security scan on your project directory and receive a security summary.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security scan to find vulnerabilities in my project dependencies?

To run a security scan, execute this Skill on your project directory to perform a dependency audit, static application security testing, and privacy dataflow scanning. It outputs a prioritized summary with critical findings first and remediation suggestions.

What is static application security testing and how does it detect vulnerabilities?

Static application security testing analyzes source code without execution to identify potential vulnerabilities. This Skill integrates SAST alongside dependency and privacy dataflow checks to provide a comprehensive vulnerability assessment.

Can I get a concise vulnerability assessment report instead of a massive raw scan log?

Yes, this vulnerability assessment tool generates a concise security summary. It aggregates results from multiple scan dimensions, returning a prioritized list of findings, severity counts, and specific remediation advice.

Does this security scanning approach work for both software development and infrastructure assessments?

Yes, security scanning via this Skill is designed for both software development and infrastructure security assessments. It evaluates dependency vulnerabilities and dataflow privacy issues across your project environment.

How do I prioritize remediation for discovered vulnerabilities during a security audit?

To prioritize remediation during a security audit, use the generated report which lists critical and high findings first. The summary includes severity counts and targeted remediation suggestions to streamline your fixes.

What is the best way to combine dependency checking and data security scanning?

The best way to combine dependency checking and data security scanning is using an integrated tool. This Skill executes both alongside static analysis, outputting a single summarized report with prioritized findings and remediation steps.