skills.rest
leonvanzyl
leonvanzylCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scanner

Scan codebases against OWASP Top 10:2025 and generate structured security reports.

426|199|Updated Aug 13, 2025
Search Tags:#security#vulnerability#codebase#owasp#audit#report
One-click install
npx skills add https://github.com/leonvanzyl/agentic-coding-starter-kit --skill security-scanner-leonvanzyl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/leonvanzyl/agentic-coding-starter-kit/tree/main/.agents/skills/security-scanner
Command: npx skills add https://github.com/leonvanzyl/agentic-coding-starter-kit --skill security-scanner-leonvanzyl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Quickly identify and remediate security weaknesses across codebases by auditing against OWASP Top 10:2025 with structured reports.

Core Features & Use Cases

  • Systematic security reconnaissance across common languages (JavaScript, TypeScript, Python, Java, Go, Ruby, C#, PHP, etc.)
  • Generates a structured markdown security report with severity ratings, CWE references, code locations, and actionable remediation guidance
  • Supports production-grade auditing workflows, including review, CI checks, and security gating
  • Use cases include code review, vulnerability assessment, and security hardening of applications

Quick Start

Scan a project folder to generate a complete OWASP Top 10:2025 security report.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 security audit on my codebase?▼

To run an OWASP Top 10 security audit, scan your project folder to automatically evaluate code against vulnerability categories, generating a structured markdown report with severity ratings, CWE references, and remediation guidance.

Can I scan a Python and JavaScript codebase for vulnerabilities at the same time?▼

Yes, you can scan Python and JavaScript codebases simultaneously. The security scanner supports multiple programming languages including TypeScript, Java, Go, Ruby, C#, and PHP, applying OWASP Top 10:2025 evaluations across your entire repository.

Does the security audit report include file paths and line numbers for findings?▼

Yes, the security audit report includes file paths and line numbers for all findings. The structured markdown output provides specific code locations, CWE references, severity ratings, and remediation guidance to help you quickly resolve identified vulnerabilities.

What is the best way to automate vulnerability assessments for CI checks?▼

The best way to automate vulnerability assessments for CI checks is using a scanner that outputs structured security reports with severity ratings. This supports security gating by systematically identifying weaknesses across your codebase before deployment.

What languages are supported for automated security reconnaissance?▼

Supported languages for automated security reconnaissance include JavaScript, TypeScript, Python, Java, Go, Ruby, C#, and PHP. The scanner evaluates code across these repositories to identify common weaknesses mapped to OWASP Top 10:2025 categories.

Related Skills

Explore More Software Engineering Skills→
Soul-Brews-StudioSoul-Brews-Studio
116

project

Manage external GitHub repositories across local ghq clones and remote GitHub.

Official
Advanced
matteocervellimatteocervelli
25

planning-doc-generator

Generate project assessment Markdown reports from structured JSON data.

Community
Intermediate
brainbrewlabsbrainbrewlabs
7

code-fixing

Fix code scanner, security auditor, and linter issues with verified edits and reports.

Official
Intermediate
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced