security_scan

Run dependency, SAST, and HoundDog security scans and summarize critical findings.

Updated Mar 13, 2026
One-click install
npx skills add https://github.com/tann200/CodingAgent --skill security-scan-tann200
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/tann200/CodingAgent/tree/main/tui/.local/skills/security_scan
Command: npx skills add https://github.com/tann200/CodingAgent --skill security-scan-tann200

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses the need for a streamlined security scan process by providing a concise and prioritized summary of security findings.

Core Features & Use Cases

  • Security Scanning: Integrates with three scanners to check for vulnerabilities in code.
  • Concise Summary: Delivers a prioritized list of critical and high findings for quick review.
  • Use Case: Use this Skill to ensure code quality and security posture, especially when security scanning is explicitly requested.

Quick Start

Run the security scan skill on your codebase.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security scan to find critical vulnerabilities in my code?

To run a security scan and find critical vulnerabilities, this tool executes dependency audits, static application security testing, and HoundDog scans in parallel, returning a prioritized summary of high and critical findings for quick review.

What is the best way to get a prioritized summary of high security findings?

The best way to get a prioritized summary of high security findings is using a scanning process that filters results to focus strictly on critical and high vulnerabilities, streamlining your code audit and security posture review.

Do I need to configure dependencies before running a code audit for vulnerability assessment?

No external dependencies are required to run this code audit for vulnerability assessment. The process executes built-in scripts and parallel scanners with tolerance for individual scanner failures, so no complex environment setup is needed.

Can I still generate a security scanning summary if one of the scanners fails?

Yes, you can still generate a security scanning summary if a scanner fails. The execution logic is designed with tolerance for individual scanner failures, ensuring that partial results still produce a concise, prioritized security summary.

When should I use a concise security scan instead of a full code audit?

You should use a concise security scan when you need a rapid vulnerability assessment focused strictly on critical and high findings, rather than processing a full code audit cluttered with low-severity issues that slow down review.