security-scanner

To scan code for security vulnerabilities, this skill performs comprehensive source code analysis to detect injection flaws, insecure configurations, hardcoded secrets, and OWASP Top 10 issues. It generates detailed reports with risk levels and suggested fixes.

Detecting hardcoded secrets and sensitive API keys is handled by scanning source code patterns to identify exposed credentials before deployment. The scanner analyzes files to prevent accidental commits of sensitive data.

Checking for SQL injection and XSS vulnerabilities involves analyzing source code for injection flaws and insecure configurations. The scanner identifies these web vulnerabilities and provides suggested fixes to mitigate risks.

Yes, you can use this security scanner to find insecure dependencies. It performs security audits using pattern matching and execution tools to analyze dependency vulnerabilities alongside source code flaws.

Vulnerability detection requires Read, Grep, Glob, and Bash tools for pattern matching and executing security audits. No external dependencies are needed, allowing the scanner to operate directly on your codebase.

You should run code analysis to identify security risks before deploying new code to ensure no sensitive API keys are committed and common web vulnerabilities are addressed. This protects against data breaches and system compromises.