security-scanner

Scan codebases for OWASP Top 10:2025 weaknesses and generate a markdown report.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/arka6fx/pixify --skill security-scanner-arka6fx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/arka6fx/pixify/tree/main/.agents/skills/security-scanner
Command: npx skills add https://github.com/arka6fx/pixify --skill security-scanner-arka6fx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Auditors and developers struggle to identify and remediate security weaknesses across codebases; this skill automates a comprehensive OWASP Top 10:2025 assessment and surfaces actionable issues with locations and remediation guidance.

Core Features & Use Cases

  • Systematically audits codebases against all OWASP Top 10:2025 categories across multiple languages.
  • Generates a structured markdown report with severity ratings, code locations, CWE references, and practical remediation steps.
  • Includes reconnaissance of project context, dependencies, entry points, and configurations to prioritize detections and reduce false positives.

Quick Start

Run the security-scanner on your project to generate an OWASP Top 10:2025 security audit report.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities?

A codebase security audit identifies and inventories weaknesses by applying OWASP Top 10:2025 detection patterns. It analyzes dependencies, configurations, entry points, and API surfaces to comprehensively surface issues across all categories.

How does static analysis map security findings to CWE IDs?

Static analysis maps security findings to CWE IDs by applying OWASP Top 10:2025 reference mappings. It reads reference files and discovers source code using glob patterns to locate exact file paths and line numbers for detected issues.

Can I audit source code in any programming language for vulnerabilities?

Yes, you can audit source code in any programming language. The scanner systematically applies OWASP Top 10:2025 categories across multiple languages by analyzing project context and API surfaces to prioritize detections and reduce false positives.

What is included in an automated OWASP security audit report?

An automated OWASP security audit report is a structured markdown document. It includes severity ratings, exact code locations, CWE references, evidence of the vulnerability, and practical remediation steps for each identified issue.

Does codebase vulnerability scanning require external security tools or dependencies?

No external security tools or dependencies are required for codebase vulnerability scanning. The scanner operates autonomously using internal reference files to perform reconnaissance and generate structured security reports.