security-scanner

Identify security vulnerabilities in code snippets and modules.

16|4|Updated Oct 13, 2025
One-click install
npx skills add https://github.com/kanopi/cms-cultivator --skill security-scanner-kanopi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/kanopi/cms-cultivator/tree/main/skills/security-scanner
Command: npx skills add https://github.com/kanopi/cms-cultivator --skill security-scanner-kanopi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly identify security vulnerabilities in code when you review or discuss it, providing focused checks on specific patterns, functions, or modules to prevent potential exploits.

Core Features & Use Cases

  • Focused, fast security checks on code snippets and patterns.
  • Decision framework guiding risk assessment and platform-specific security practices.
  • Use Case: When reviewing a module for Drupal or WordPress integration, it highlights common security issues and recommended mitigations.

Quick Start

Paste the code snippet you want evaluated and the scanner will return targeted vulnerabilities and concrete remediation suggestions.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check code for security vulnerabilities during a review?

Identify security vulnerabilities by running targeted static analysis on code snippets, modules, or small projects to detect patterns matching common attack surfaces and receive actionable remediation findings.

What is static analysis for finding security flaws in code?

Static analysis identifies security vulnerabilities by evaluating code patterns and functions without execution, applying a structured framework based on common attack surfaces, risk levels, and platform-specific practices to return actionable findings.

Can I use this to scan Drupal and WordPress modules for security issues?

Yes, the scanner evaluates platform-specific code for Drupal and WordPress integrations, highlighting common security issues and providing recommended mitigations based on platform practices and OWASP Top 10 attack surfaces.

How do I find OWASP Top 10 vulnerabilities in my code snippets?

You can find OWASP Top 10 vulnerabilities by providing code snippets to the scanner, which performs targeted checks on specific patterns and functions to identify potential exploits and return actionable remediation suggestions.

Does this vulnerability scanner work across different programming languages?

The scanner applies to code reviews and development contexts across languages and platforms, analyzing code snippets, modules, or small projects to identify security vulnerabilities based on common attack surfaces and risk levels.

What are the limitations of on-demand code security scanning?

This approach is limited to analyzing pasted code snippets, modules, or small projects where specific security concerns arise, rather than performing automated deep scans on large enterprise codebases or runtime environments.