security_scan

Consolidate dependency, static analysis, and dataflow scan results into a prioritized report.

Updated Apr 16, 2026
One-click install
npx skills add https://github.com/scikrikci/skills --skill security-scan-scikrikci
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/scikrikci/skills/tree/main/skills/security_scan
Command: npx skills add https://github.com/scikrikci/skills --skill security-scan-scikrikci

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams require a single, prioritized view of vulnerabilities detected by multiple scanners to speed triage and remediation.

Core Features & Use Cases

  • Orchestrates runDependencyAudit, runSastScan, and runHoundDogScan in parallel and aggregates results into a concise report.
  • Tolerates per-scanner failures and returns a prioritized summary emphasizing critical and high findings first.
  • Use Case: when you need a unified security snapshot across dependencies, code, and dataflow findings to brief stakeholders.

Quick Start

Invoke the security_scan skill to run all three scanners in parallel and return a prioritized security report.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I consolidate security findings from multiple scanners into a single prioritized report?

Aggregating security findings from multiple scanners into a prioritized report requires orchestrating dependency, static analysis, and dataflow privacy scans in parallel. This approach surfaces critical and high vulnerabilities first, creating a unified snapshot for stakeholder triage.

What is the best way to run dependency audits and SAST scans together for a unified security snapshot?

Running dependency audits and SAST scans together involves orchestrating these tools in parallel to aggregate results. This unified security snapshot prioritizes critical code and dependency findings, speeding up remediation planning and stakeholder briefings.

Does parallel security orchestration still generate a report if the SAST or dependency scanner fails?

Parallel security orchestration tolerates per-scanner failures and continues generating a prioritized report. Resilient handling of partial failures ensures that successful dependency, static analysis, or dataflow privacy scan payloads are still surfaced for triage.

Can I use a single security scan to surface both code vulnerabilities and dataflow privacy findings?

You can use a single security scan to surface both code vulnerabilities and dataflow privacy findings. It orchestrates SAST, dependency audits, and dataflow scanners in parallel, aggregating the results into one concise remediation plan emphasizing critical issues.

How are vulnerabilities prioritized when aggregating static analysis and dependency scan results?

Vulnerabilities are prioritized by emphasizing critical and high findings first when aggregating static analysis and dependency scan results. This consolidated view applies resilient handling to partial failures, returning a concise remediation plan for stakeholder briefings.