skills.rest
Postalocity
PostalocityOFFICIAL
Explore all skills by this author →
GitHub

security-scan

Scan code, dependencies, and configurations to identify and remediate security vulnerabilities.

1|Updated Mar 5, 2026
Search Tags:#security#vulnerability#compliance#reporting#risk-assessment#ci-cd#scanning
One-click install
npx skills add https://github.com/Postalocity/template-microsite --skill security-scan-postalocity
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/Postalocity/template-microsite/tree/main/.opencode/skills/security-scan
Command: npx skills add https://github.com/Postalocity/template-microsite --skill security-scan-postalocity

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams identify and remediate security vulnerabilities in software projects by scanning code, dependencies, configurations, and deployment artifacts.

Core Features & Use Cases

  • Vulnerability scanning across code, dependencies, and configurations in CI/CD workflows.
  • Risk assessment with prioritized remediation guidance and actionable reports.
  • Generating security reports suitable for compliance reviews and stakeholder communication.

Quick Start

Run the security-scan skill against your project to produce a vulnerability report.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities in a CI/CD pipeline?▼

Vulnerability scanning in CI/CD workflows involves analyzing your project's code, dependencies, and configurations to identify security risks. This skill performs that scanning and produces actionable risk assessments with prioritized remediation guidance.

What is included in a software risk assessment report for compliance reviews?▼

A software risk assessment report for compliance includes identified vulnerabilities across code and dependencies, prioritized remediation guidance, and actionable summaries. This skill generates these reports to facilitate stakeholder communication and compliance reviews.

Can I assess security risks in dependencies and configurations during code review?▼

Yes, you can assess security risks in dependencies and configurations during code review by running this scanning skill. It evaluates project artifacts to detect vulnerabilities and provides targeted recommendations for remediation before deployment.

What is the best way to identify and remediate vulnerabilities in deployment artifacts?▼

The best way to identify and remediate vulnerabilities in deployment artifacts is to scan them using this skill within your deployment workflows. It detects security flaws across artifacts and outputs prioritized, actionable recommendations for fixing them.

Does security scanning require any specific dependencies or environment setup?▼

Security scanning with this skill requires no specific dependencies or external components to function. You can run it directly against your software project to evaluate code, dependencies, and configurations without additional environment setup.

Related Skills

Explore More Software Engineering Skills→
marcusagmmarcusagm
4

vulnerability-scanner

Scan codebases for dependency, secret, and configuration vulnerabilities.

Community
Advanced
CENKSSSCENKSSS

risk-based-testing

Prioritize testing efforts by risk assessment with structured JSON output.

Community
Advanced
mcampbellrmcampbellr

gsd-code-review

Automate code review for bugs, security vulnerabilities, and quality issues.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced