skills.rest
LeroyAdonis
LeroyAdonisCOMMUNITY
Explore all skills by this author →
GitHub

security-scanner

Identify security vulnerabilities in codebases against OWASP Top 10:2025.

Updated May 14, 2026
Search Tags:#security#vulnerability#owasp#audit#compliance#reporting#code-scan
One-click install
npx skills add https://github.com/LeroyAdonis/vector --skill security-scanner-leroyadonis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/LeroyAdonis/vector/tree/main/.agents/skills/security-scanner
Command: npx skills add https://github.com/LeroyAdonis/vector --skill security-scanner-leroyadonis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly and reliably identifies security weaknesses in codebases using the OWASP Top 10:2025 framework and generates actionable remediation guidance.

Core Features & Use Cases

  • Systematic security audit across languages, dependencies, configurations, and build artifacts.
  • Produces a structured report with severity, CWE mappings, code locations, and fixes.
  • Use case: security review of a web application with dependencies and CI/CD configurations, or continuous security monitoring of a codebase.

Quick Start

Scan a project to generate a comprehensive security audit report.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security audit on my source code?▼

A security audit works by analyzing your source code, dependencies, and CI/CD configurations against the OWASP Top 10:2025 framework. It identifies vulnerabilities across diverse languages and project types, mapping findings to CWE references and providing structured remediation guidance.

Can I scan dependencies and CI/CD configurations for vulnerabilities?▼

Yes, you can scan dependencies and CI/CD configurations for vulnerabilities. The audit systematically analyzes these artifacts alongside source code to identify weaknesses, delivering a structured report with category mappings, code locations, and remediation guidance.

Does the vulnerability report include CWE references and remediation guidance?▼

Yes, the vulnerability report includes CWE references and remediation guidance. The structured audit output contains severity ratings, category mappings, code locations, and actionable fixes suitable for integration into your security workflows.

What is the best way to automate continuous security monitoring of a codebase?▼

The best way to automate continuous security monitoring of a codebase is to repeatedly execute this audit across your project. It analyzes source code and configurations to generate structured reports with evidence and fixes, enabling reliable integration into ongoing security workflows.

Are there limitations when scanning diverse languages and project types for security weaknesses?▼

When scanning diverse languages and project types, limitations depend on the accessibility of your source code, dependencies, and CI/CD artifacts. The audit requires these inputs to accurately identify vulnerabilities and map them to the OWASP Top 10:2021 categories with remediation guidance.

Related Skills

Explore More Software Engineering Skills→
cegit27cegit27
3

cso

Audit infrastructure security across secrets, dependencies, CI/CD, and LLM/AI.

Official
Advanced
89jobrien89jobrien
4

security-audit

Identify software codebase vulnerabilities and map findings to OWASP Top 10.

Community
Advanced
claudcherejiclaudchereji

dependency-manager

Audit project dependencies for vulnerabilities and version conflicts.

Community
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced