skills.rest
HouseGarofalo
HouseGarofaloOFFICIAL
Explore all skills by this author →
GitHub

security-scanner

Scan container images, dependencies, and IaC for security vulnerabilities.

3|1|Updated Feb 2, 2026
Search Tags:#security#vulnerability#compliance#sast#trivy#snyk#dast
One-click install
npx skills add https://github.com/HouseGarofalo/claude-code-base --skill security-scanner-housegarofalo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/HouseGarofalo/claude-code-base/tree/main/.claude/skills/security-scanner
Command: npx skills add https://github.com/HouseGarofalo/claude-code-base --skill security-scanner-housegarofalo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in code, container images, and infrastructure configurations, ensuring a more secure software development lifecycle.

Core Features & Use Cases

  • Vulnerability Scanning: Detects known vulnerabilities in dependencies, container images, and IaC files.
  • Static & Dynamic Analysis: Performs SAST and DAST to find code-level security flaws.
  • Use Case: Before deploying a new microservice, use this Skill to scan its container image and dependencies for critical vulnerabilities, preventing potential breaches.

Quick Start

Use the security-scanner skill to scan the current directory for vulnerabilities using Trivy.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan container images for vulnerabilities before deployment?▼

To scan container images for vulnerabilities, this Skill utilizes Trivy and Snyk to detect known security issues in dependencies and infrastructure configurations. It performs comprehensive vulnerability assessment to help prevent potential breaches before deployment.

Can I perform both SAST and DAST analysis for code-level security flaws?▼

Yes, you can perform both SAST and DAST analysis to find code-level security flaws. The Skill integrates Semgrep for static analysis and OWASP ZAP for dynamic analysis, supporting comprehensive SAST, DAST, and SCA practices across various targets.

What is the best way to assess infrastructure-as-code for security compliance?▼

Assessing infrastructure-as-code for security compliance is best handled by scanning IaC files for known vulnerabilities and configuration issues. This Skill identifies and reports security issues across infrastructure configurations using tools like Trivy.

Does Trivy work with Snyk for comprehensive dependency scanning?▼

Yes, Trivy works alongside Snyk for comprehensive dependency scanning. The Skill leverages both tools to perform Software Composition Analysis, detecting known vulnerabilities in project dependencies and container images efficiently.

How do I run a quick vulnerability scan on my current project directory?▼

To run a quick vulnerability scan on your current project directory, you can use the Skill to scan the current directory with Trivy. It will analyze your dependencies and code for known vulnerabilities and report the identified security issues.

Related Skills

Explore More Software Engineering Skills→
AgentSecOpsAgentSecOps
183

sca-trivy

Scan container images, dependencies, and IaC files for vulnerabilities and misconfigurations.

Official
Advanced
abnejLLCabnejLLC

aws-inspector-expert

Analyze AWS Inspector findings and map them to compliance frameworks.

Community
Intermediate
HelloEverybobyHelloEveryboby
17

SDLCOrchestrator

Automate SAST, DAST, and SCA security scans in CI/CD pipelines.

Community
Intermediate
troykellytroykelly
10

security-reviewer

Execute the security-reviewer subagent for code vulnerability detection.

Community
Basic