skills.rest
YSheldon
YSheldonCOMMUNITY
Explore all skills by this author →
GitHub

security_scan

Coordinate parallel security scanners and return prioritized vulnerability summaries.

Updated Apr 12, 2026
Search Tags:#security#sast#vulnerabilities#privacy#scanning#dataflow#dependency-audit
One-click install
npx skills add https://github.com/YSheldon/Prompt-Log --skill security-scan-ysheldon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security_scan
Source: https://github.com/YSheldon/Prompt-Log/tree/main/.local/skills/security_scan
Command: npx skills add https://github.com/YSheldon/Prompt-Log --skill security-scan-ysheldon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill coordinates multiple security scanners to quickly identify and summarize vulnerabilities across a codebase, dependencies, and data flows, enabling faster risk assessment.

Core Features & Use Cases

  • Orchestrates three scanners: runDependencyAudit, runSastScan, runHoundDogScan to cover dependencies, code, and privacy/security dataflow.
  • Executes scanners in parallel and tolerates per-scanner failures to avoid breaking the overall workflow.
  • Produces a structured, prioritized summary highlighting critical and high findings first, with per-scanner details for auditing.
  • Ideal for CI workflows, security reviews, and post-merge audits where fast risk visibility is needed.

Quick Start

Run a full security scan on your project repository and return a prioritized summary of findings.

Frequently Asked Questions about security_scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security scan that covers code, dependencies, and data flow in one pass?▼

A coordinated security scan orchestrates dependency audits, SAST scans, and privacy dataflow checks in parallel to identify vulnerabilities across your codebase and return a prioritized risk summary.

What is the best way to prioritize SAST and dependency vulnerability findings for a quick risk snapshot?▼

Prioritizing SAST and dependency vulnerability findings involves running parallel scanners that return structured results, highlighting critical and high-severity issues first for fast manual review or CI pipelines.

Can I execute multiple security scanners in parallel without failing the CI pipeline if one scanner errors?▼

Parallel security scanners can execute simultaneously while tolerating per-scanner failures, ensuring that individual scanner errors do not break the overall CI workflow or halt the vulnerability assessment.

Does this vulnerability scanning approach support manual code reviews as well as automated CI workflows?▼

This vulnerability scanning approach supports both automated CI workflows and manual code reviews by producing a structured, prioritized summary of findings for fast risk visibility across software projects.

What types of security vulnerabilities are identified when scanning dependencies and privacy data flows?▼

Scanning dependencies and privacy data flows identifies known vulnerable packages in your codebase, static application security issues in source code, and sensitive data exposure risks across data flows.

Related Skills

Explore More Software Engineering Skills→
pekralpekral

readme-generator

Generate README, CONTRIBUTING, and SECURITY files from repository source code.

Community
Intermediate
daishimandaishiman
6

security-reporting

Generate standardized security diagnostic reports from vulnerability findings.

Community
Intermediate
Kushal9889Kushal9889

husky

Sets up Husky git hooks to automate code quality checks and testing before commits.

Community
Intermediate
offers-pngoffers-png

security_scan

Run dependency, SAST, and HoundDog scans in parallel and report vulnerabilities.

Community
Advanced