security-scanner

Name: security-scanner
Availability: InStock
Author: leroyadonis

Identify security vulnerabilities in codebases against OWASP Top 10:2025.

Updated May 14, 2026

Search Tags:#security #vulnerability #owasp #audit #compliance #reporting #code-scan

Ready to run

npx skills add https://github.com/LeroyAdonis/vector --skill security-scanner-leroyadonis

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/LeroyAdonis/vector/tree/main/.agents/skills/security-scanner
Command: npx skills add https://github.com/LeroyAdonis/vector --skill security-scanner-leroyadonis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly and reliably identifies security weaknesses in codebases using the OWASP Top 10:2025 framework and generates actionable remediation guidance.

Core Features & Use Cases

Systematic security audit across languages, dependencies, configurations, and build artifacts.
Produces a structured report with severity, CWE mappings, code locations, and fixes.
Use case: security review of a web application with dependencies and CI/CD configurations, or continuous security monitoring of a codebase.

Quick Start

Scan a project to generate a comprehensive security audit report.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform an OWASP Top 10 security audit on my source code?▼

A security audit works by analyzing your source code, dependencies, and CI/CD configurations against the OWASP Top 10:2025 framework. It identifies vulnerabilities across diverse languages and project types, mapping findings to CWE references and providing structured remediation guidance.

Can I scan dependencies and CI/CD configurations for vulnerabilities?▼

Yes, you can scan dependencies and CI/CD configurations for vulnerabilities. The audit systematically analyzes these artifacts alongside source code to identify weaknesses, delivering a structured report with category mappings, code locations, and remediation guidance.

Does the vulnerability report include CWE references and remediation guidance?▼

Yes, the vulnerability report includes CWE references and remediation guidance. The structured audit output contains severity ratings, category mappings, code locations, and actionable fixes suitable for integration into your security workflows.

What is the best way to automate continuous security monitoring of a codebase?▼

The best way to automate continuous security monitoring of a codebase is to repeatedly execute this audit across your project. It analyzes source code and configurations to generate structured reports with evidence and fixes, enabling reliable integration into ongoing security workflows.

Are there limitations when scanning diverse languages and project types for security weaknesses?▼

When scanning diverse languages and project types, limitations depend on the accessibility of your source code, dependencies, and CI/CD artifacts. The audit requires these inputs to accurately identify vulnerabilities and map them to the OWASP Top 10:2021 categories with remediation guidance.