skills.rest
j0KZ
j0KZCOMMUNITY
Explore all skills by this author →
GitHub

security-scanner

Scan JavaScript/TypeScript codebases for OWASP Top 10 risks and secrets.

Updated Oct 1, 2025
Search Tags:#OWASP#security#dependencies#secrets#scanning
One-click install
npx skills add https://github.com/j0KZ/mcp-agents --skill security-scanner-j0kz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/j0KZ/mcp-agents/tree/main/starter-kit/template/.claude/skills/security-scanner
Command: npx skills add https://github.com/j0KZ/mcp-agents --skill security-scanner-j0kz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It automates security vulnerability scanning across code, dependencies and secrets.

Core Features & Use Cases

  • "OWASP Top 10 detection"
  • "Secret scanning"
  • "Dependency CVE checks"
  • "Remediation guidance"

Quick Start

Run: npx @j0kz/security-scanner scan to start.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan JavaScript and TypeScript code for security vulnerabilities?▼

Security scanning identifies OWASP Top 10 risks, CVEs in dependencies, and insecure coding patterns in your codebase. Run `npx @j0kz/security-scanner scan` to detect vulnerabilities across your JavaScript/TypeScript project and receive remediation guidance.

Can I detect secrets and API keys leaking in my codebase?▼

Yes, secret scanning is built into the scanner to catch exposed API keys, credentials, and other sensitive data. It runs as part of the full scan and flags leaks for immediate remediation.

How do I check my dependencies for known CVEs?▼

Dependency CVE checks automatically scan your project's dependencies against known vulnerability databases. The scanner identifies affected versions and provides upgrade guidance for each vulnerable package.

Can I integrate security scanning into my pre-commit workflow?▼

Yes, the scanner supports pre-commit hooks so vulnerabilities are caught before code is committed. This automates security checks and prevents vulnerable code from entering your repository.

What format are the security scan results generated in?▼

The scanner generates SARIF reports, a standard format for security analysis results. SARIF output integrates with CI/CD pipelines and security tools for centralized vulnerability tracking.

Does the scanner work with configurable rules for specific compliance requirements?▼

Yes, configurable rules let you tailor scanning to your compliance needs and security policies. Adjust detection rules to match your project's risk profile and regulatory requirements.

Related Skills

Explore More Software Engineering Skills→
nolebasenolebase
316

antfu

Configure ESLint, Prettier, and VS Code for JavaScript/TypeScript projects.

Official
Intermediate
igbuendigbuend
8

sarif-issue-reporter

Analyze SARIF 2.1.0 files to generate vulnerability reports with CVSS scoring.

Community
Advanced
christopherlouetchristopherlouet
5

qa-security

Audit codebases for OWASP top 10 security vulnerabilities.

Community
Advanced
aivos-xieaivos-xie
1

mobile-security

Analyze APK files for vulnerabilities using static and dynamic security analysis.

Community
Advanced