Analyze whole-codebase data flows for OWASP Top 10 vulnerabilities.
npx skills add https://github.com/phrazzld/agent-skills --skill security-scan-phrazzld
Please help me install this Agent Skill. Skill: security-scan Source: https://github.com/phrazzld/agent-skills/tree/main/core/security-scan Command: npx skills add https://github.com/phrazzld/agent-skills --skill security-scan-phrazzld
This Skill addresses the challenge of identifying complex, cross-file security vulnerabilities that traditional file-by-file scanners often miss, ensuring a more comprehensive security posture.
Run a comprehensive security scan on the current project, focusing on authentication and API routes.
High-intent search queries and answers about installing and using this skill.
A whole-codebase security scan analyzes the entire project by loading it into a large context window to trace end-to-end data flows. This approach identifies complex security risks spanning multiple files and modules that traditional file-by-file scanners often miss.
Yes, this security analysis covers the OWASP Top 10, performs dependency audits using tools like pip-audit and cargo, and scans for hardcoded secrets. It provides comprehensive vulnerability detection for regular security reviews and pre-deployment checks.
The best way to detect hardcoded secrets is to perform a comprehensive secrets scan across the whole codebase. This process identifies sensitive information and hardcoded credentials embedded within your project files during a deep security analysis.
Yes, you can use pip-audit and cargo alongside other dependency managers like npm and pnpm. The analysis integrates these tools to perform dependency audits, scanning your project dependencies for known vulnerabilities and ensuring a secure software supply chain.
Whole-codebase vulnerability analysis finds missed risks because it uses a large context window to trace cross-module data flows. By evaluating the entire project simultaneously, it detects logic flaws and injection vulnerabilities that isolated file-by-file scanning cannot track.
lklimekScan Go, Rust, Python, and Node.js dependencies for known vulnerabilities.
indoor47Audit codebases for OWASP Top 10 vulnerabilities, misconfigurations, and exposed secrets.
benjaminshoemakerScan codebases for dependency vulnerabilities, risky patterns, and secrets.
matteocervelliScan codebases for secrets, vulnerable dependencies, and insecure patterns.
