skills.rest
ialameh
ialamehCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scanner

Scan code repositories for secrets, dependency vulnerabilities, and OWASP patterns.

2|Updated Apr 30, 2026
Search Tags:#security#vulnerability#owasp#remediation#code-analysis#secret-detection#dependency-scanning
One-click install
npx skills add https://github.com/ialameh/sift-coder --skill security-scanner-ialameh
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/ialameh/sift-coder/tree/main/skills/security-scanner
Command: npx skills add https://github.com/ialameh/sift-coder --skill security-scanner-ialameh

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automated security analysis helps developers identify weaknesses in codebases, reducing risk and accelerating secure delivery.

Core Features & Use Cases

  • Secrets detection: scans repository files for exposed credentials, API keys, and tokens, with entropy assessment and reduced false positives.
  • Dependency vulnerability analysis: evaluates language ecosystems, reports CVEs, and provides remediation guidance.
  • OWASP Top 10 coverage: recognizes common attack patterns and misconfigurations to inform fixes.
  • Remediation guidance & integration: outputs structured steps, verification tips, and CI/CD integration suggestions.

Quick Start

Run the security scan across your repository and review the remediation guidance to begin securing your codebase.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and exposed secrets?▼

Scanning a codebase for security vulnerabilities involves automated pattern matching across repository files to detect exposed secrets, dependency CVEs, and common weakness patterns, delivering structured remediation guidance to fix identified risks.

What is dependency scanning and how does it find CVEs in my project?▼

Dependency scanning evaluates language ecosystems in your repository to report known CVEs affecting your external libraries and provides actionable remediation guidance to update or patch vulnerable dependencies.

Can I use automated security analysis to check for OWASP Top 10 vulnerabilities?▼

Yes, automated security analysis recognizes common OWASP Top 10 attack patterns and misconfigurations in code. It scans repository files to inform fixes and aligns with comprehensive vulnerability analysis.

Does secret detection work across different programming languages?▼

Secret detection works across different programming languages by scanning repository files for exposed credentials, API keys, and tokens using entropy assessment to reduce false positives and accurately identify risks.

How do I integrate code analysis security scanning into my CI/CD pipeline?▼

Integrate security scanning into your CI/CD pipeline by running automated code analysis that outputs structured remediation steps and verification tips. The scanner provides integration suggestions to secure continuous delivery.

Related Skills

Explore More Software Engineering Skills→
riftzen-bitriftzen-bit

configure-ecc

Install and configure Everything Gemini Code components with verification and optional optimization.

Community
Advanced
AgentientAgentient
2

security-testing

Identify software vulnerabilities and outline remediation steps for codebases and CI/CD pipelines.

Official
Intermediate
thanhquan3010thanhquan3010

springboot-verification

Automates build, static analysis, testing with coverage, vulnerability scanning and secret detection for Spring Boot projects.

Community
Advanced
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced