skills.rest
ProxiBlue
ProxiBlueCOMMUNITY
Explore all skills by this author →
Website𝕏@proxiblueGitHub

security-scan

Automates Magento 2 security auditing to identify vulnerabilities and misconfigurations.

15|1|Updated Oct 24, 2025
Search Tags:#security#compliance#reporting#vulnerability scan#code-analysis#Magento
One-click install
npx skills add https://github.com/ProxiBlue/claude-skills --skill security-scan-proxiblue
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/ProxiBlue/claude-skills/tree/main/security-scan
Command: npx skills add https://github.com/ProxiBlue/claude-skills --skill security-scan-proxiblue

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates security auditing and vulnerability scanning for Magento 2 applications.

Core Features & Use Cases

  • Dependency Vulnerability Scan: Scan composer dependencies for known CVEs, check for outdated Magento core, identify vulnerable third-party modules, review security patch status, and validate PHP support.
  • Configuration Security Audit: Audit admin security settings, two-factor authentication status, session configuration, cookie security, HTTPS enforcement, and secret key usage in admin URLs.
  • File System Security: Check file and directory permissions, sensitive file exposure (e.g., .git, .env), var/log accessibility, and pub/media upload validation.
  • Code Security Analysis: Inspect for SQL injection, XSS prevention, CSRF protections, input validation, insecure deserialization, and hardcoded credentials.
  • Access Control Validation: Audit admin users, roles, permissions, API authentication, customer password policies, and failed login monitoring.
  • Compliance Checks: Validate PCI DSS requirements, GDPR settings, security headers, cookie consent, and data encryption controls.

Quick Start

Run the security audit workflow against a Magento 2 project and review the generated report.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a Magento 2 security audit and vulnerability scan?▼

Automate a Magento 2 security audit by scanning composer dependencies for known CVEs, auditing admin configurations, validating file permissions, and analyzing code for SQL injection or XSS to generate a structured compliance report.

How can I check my Magento deployment for PCI DSS and GDPR compliance?▼

Check Magento PCI DSS and GDPR compliance by validating data encryption controls, cookie consent settings, security headers, and access-control policies to produce a comprehensive security compliance verification report.

What is the best way to find vulnerable third-party modules in Magento 2?▼

Find vulnerable third-party Magento modules by running a dependency vulnerability scan that checks composer dependencies against known CVEs, reviews security patch status, identifies outdated core versions, and validates PHP support.

Does this security scan check Magento admin access control and two-factor authentication?▼

Yes, the security scan audits Magento admin access control by validating two-factor authentication status, reviewing admin user roles and permissions, checking API authentication, and monitoring failed login attempts.

Can I detect insecure deserialization and hardcoded credentials in my Magento codebase?▼

Yes, you can detect insecure deserialization and hardcoded credentials through code security analysis, which also inspects SQL injection risks, XSS prevention mechanisms, CSRF protections, and input validation.

How do I audit sensitive file exposure and pub/media upload validation in Magento?▼

Audit sensitive Magento file exposure by checking file and directory permissions, restricting access to .git or .env files, preventing var/log accessibility, and validating pub/media upload mechanisms.

Related Skills

Explore More Software Engineering Skills→
ProxiBlueProxiBlue
15

cache-diagnostic

Analyze Magento 2 cache configurations and runtime metrics to identify bottlenecks.

Community
Advanced
ActiveInferenceInstituteActiveInferenceInstitute
30

gnn-security-validation

Audit GNN pipeline security and validate access control for generated code.

Community
Advanced
maxnormmaxnorm
26

magento-security-analyst

Identify and mitigate security vulnerabilities in Magento 2 deployments.

Community
Advanced
Serg28Serg28

security-reviewer

Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.

Community
Intermediate