security-scanner

Detect vulnerabilities, exposed secrets, and misconfigurations in codebases.

Updated Aug 23, 2026

Search Tags:#security #owasp #secrets #sast #iac #container

Ready to run

npx skills add https://github.com/benreceveur/claude-workflow-engine --skill security-scanner-benreceveur

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/benreceveur/claude-workflow-engine/tree/main/skills/security-scanner
Command: npx skills add https://github.com/benreceveur/claude-workflow-engine --skill security-scanner-benreceveur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Detect vulnerabilities, exposed secrets, and misconfigurations early to prevent breaches.

Core Features & Use Cases

SAST for vulnerabilities
Secret/credential detection
OWASP Top 10 checks
Container security, IaC security
Dependency vulnerability scanning

Quick Start

Run a pre-commit security scan: python scripts/main.py --operation scan-all

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect security vulnerabilities and exposed secrets in my codebase?▼

Security scanning identifies vulnerabilities, exposed secrets, and misconfigurations by analyzing code, dependencies, containers, and infrastructure as code. Run the scanner on your repository to receive structured findings with severity levels, locations, CWE references, and remediation guidance across SAST, OWASP Top 10, and dependency checks.

Can I use security scanning in pre-commit hooks and pull request reviews?▼

Yes. The scanner integrates into pre-commit checks and pull-request workflows to catch security issues before they reach production. Execute it as part of your CI/CD pipeline to validate code, dependencies, containers, and IaC against security standards automatically.

What security standards and vulnerability types does this scanner cover?▼

The scanner implements SAST for code vulnerabilities, detects exposed secrets and credentials, validates against OWASP Top 10, checks container security configurations, scans infrastructure as code for misconfigurations, and analyzes dependencies for known vulnerabilities with CWE references.

How do I run a security scan on my repository?▼

Execute the pre-commit security scan using `python scripts/main.py --operation scan-all` to analyze your codebase. The scanner produces structured findings including vulnerability location, severity, remediation steps, confidence scores, and CWE references across all supported security domains.

Does this work for infrastructure as code and container security?▼

Yes. The scanner validates IaC security and container configurations alongside traditional code analysis. It detects misconfigurations in infrastructure definitions and container images, producing findings with severity and remediation guidance for compliance validations and deployment reviews.

What output does the security scanner produce?▼

The scanner generates structured security findings that include vulnerability type, file location, severity level, remediation steps, CWE references, and optional confidence scores. Results support security audits, compliance validations, onboarding new repositories, and production deployment reviews.