skills.rest
Cheggin
ChegginCOMMUNITY
Explore all skills by this author →
Website𝕏@reagan_hsuGitHub

security-scanner

Audit codebases for dependency vulnerabilities, hardcoded secrets, and OWASP Top 10 misconfigurations.

1|1|Updated Apr 13, 2026
Search Tags:#security#secret-detection#dependency-scan#owasp-top-10#ci-gating#vulnerability-report
One-click install
npx skills add https://github.com/Cheggin/request-for-startups --skill security-scanner-cheggin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/Cheggin/request-for-startups/tree/main/skills/security-scanner
Command: npx skills add https://github.com/Cheggin/request-for-startups --skill security-scanner-cheggin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditing codebases for dependency vulnerabilities, secret exposure, and OWASP Top 10 risks to prevent insecure releases and guard against data leakage.

Core Features & Use Cases

  • Dependency vulnerability scanning (e.g., npm audit, Snyk) with actionable remediation guidance.
  • Secret detection and enforcement via pre-commit hooks and repository scanning.
  • OWASP Top 10 alignment checks for API routes, authentication, authorization, and misconfigurations.
  • Gate security findings to block risky PRs and deployments in CI/CD workflows.

Quick Start

Run a comprehensive security scan on your repository and review a prioritized remediation report before merging.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for dependency vulnerabilities and hardcoded secrets before merging a PR?▼

To scan codebases for dependency vulnerabilities and hardcoded secrets before merging, audit with npm or yarn and enforce pre-commit hooks. This generates a prioritized remediation report and blocks risky PRs from insecure builds.

Can I gate CI pipelines to block deployments when OWASP Top 10 misconfigurations are detected?▼

Yes, you can gate CI pipelines to block deployments when OWASP Top 10 misconfigurations are detected. Security gating rules assess API routes and authentication, preventing risky PRs from insecure builds during pre-deployment checks.

What's the best way to check API authentication and authorization for OWASP Top 10 risks?▼

The best way to check API authentication and authorization for OWASP Top 10 risks is running alignment checks on API routes. This audits misconfigurations and produces actionable remediation guidance for safer web app and API releases.

Does this security scanner work with npm audit and Snyk for dependency scanning?▼

Yes, this security scanner works with npm audit and Snyk for dependency scanning. It requires integration with npm or yarn audit to identify vulnerabilities and provide actionable remediation guidance during CI pipelines and pre-deployment checks.

When do I need to run a comprehensive secret detection and repository scanning check?▼

You need to run comprehensive secret detection and repository scanning during PRs, CI pipelines, and pre-deployment checks. This prevents insecure releases and guards against data leakage by enforcing security via pre-commit hooks.

Related Skills

Explore More Software Engineering Skills→
TTAWDTTTTAWDTT
4

project-bootstrapper

Generate project structure, tooling, and documentation for new or existing repositories.

Community
Advanced
vecearvecear

dependency-vulnerability-triage

Convert npm audit and Snyk reports into prioritized patch plans.

Community
Advanced
allanninalallanninal
1

semgrep

Scan codebases for security vulnerabilities and coding standards with Semgrep.

Community
Intermediate
rfdiosuaorfdiosuao
30

security-audit

Audit application code for OWASP Top 10 vulnerabilities and CVE impacts.

Community
Advanced