security-scanner

Audit codebases for dependency vulnerabilities, hardcoded secrets, and OWASP Top 10 misconfigurations.

1|1|Updated Apr 13, 2026

Search Tags:#security #secret-detection #dependency-scan #owasp-top-10 #ci-gating #vulnerability-report

Ready to run

npx skills add https://github.com/Cheggin/request-for-startups --skill security-scanner-cheggin

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/Cheggin/request-for-startups/tree/main/skills/security-scanner
Command: npx skills add https://github.com/Cheggin/request-for-startups --skill security-scanner-cheggin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditing codebases for dependency vulnerabilities, secret exposure, and OWASP Top 10 risks to prevent insecure releases and guard against data leakage.

Core Features & Use Cases

Dependency vulnerability scanning (e.g., npm audit, Snyk) with actionable remediation guidance.
Secret detection and enforcement via pre-commit hooks and repository scanning.
OWASP Top 10 alignment checks for API routes, authentication, authorization, and misconfigurations.
Gate security findings to block risky PRs and deployments in CI/CD workflows.

Quick Start

Run a comprehensive security scan on your repository and review a prioritized remediation report before merging.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for dependency vulnerabilities and hardcoded secrets before merging a PR?▼

To scan codebases for dependency vulnerabilities and hardcoded secrets before merging, audit with npm or yarn and enforce pre-commit hooks. This generates a prioritized remediation report and blocks risky PRs from insecure builds.

Can I gate CI pipelines to block deployments when OWASP Top 10 misconfigurations are detected?▼

Yes, you can gate CI pipelines to block deployments when OWASP Top 10 misconfigurations are detected. Security gating rules assess API routes and authentication, preventing risky PRs from insecure builds during pre-deployment checks.

What's the best way to check API authentication and authorization for OWASP Top 10 risks?▼

The best way to check API authentication and authorization for OWASP Top 10 risks is running alignment checks on API routes. This audits misconfigurations and produces actionable remediation guidance for safer web app and API releases.

Does this security scanner work with npm audit and Snyk for dependency scanning?▼

Yes, this security scanner works with npm audit and Snyk for dependency scanning. It requires integration with npm or yarn audit to identify vulnerabilities and provide actionable remediation guidance during CI pipelines and pre-deployment checks.

When do I need to run a comprehensive secret detection and repository scanning check?▼

You need to run comprehensive secret detection and repository scanning during PRs, CI pipelines, and pre-deployment checks. This prevents insecure releases and guards against data leakage by enforcing security via pre-commit hooks.