skills.rest
lexicalninja
lexicalninjaCOMMUNITY
Explore all skills by this author →
GitHub

security-scanner

Scan codebases for security vulnerabilities and generate structured remediation reports.

2|Updated Jan 15, 2026
Search Tags:#security#vulnerability#remediation#reporting#code-review#analyze#ci
One-click install
npx skills add https://github.com/lexicalninja/my-little-scrum-team --skill security-scanner-lexicalninja
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/lexicalninja/my-little-scrum-team/tree/main/skills/security-scanner
Command: npx skills add https://github.com/lexicalninja/my-little-scrum-team --skill security-scanner-lexicalninja

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers locate security weaknesses in codebases, generate structured vulnerability reports, and guide remediation to prevent breaches.

Core Features & Use Cases

  • Automated Vulnerability Scanning: analyze code for SQLi, XSS, hardcoded secrets, and insecure authentication.
  • Structured Reports & Remediation: produce file paths, line numbers, vulnerability types, severities, current code, suggested fixes, rationale, and prioritization.
  • CI/CD & Collaboration: integrates with PR checks and CI pipelines to surface security findings early.

Quick Start

Run a codebase scan to generate a structured security report with remediation steps.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities like SQL injection and XSS?▼

Scanning code for security vulnerabilities like SQL injection and XSS involves analyzing your codebase to detect injection flaws, hardcoded secrets, and insecure authentication, then generating a structured report with file paths, line numbers, severities, and recommended fixes.

What is included in a structured security vulnerability report?▼

A structured security vulnerability report includes file paths, line numbers, vulnerability types, severities, current code snippets, recommended fixes, rationale, and prioritization to guide remediation and prevent breaches.

Can I integrate vulnerability scanning into CI pipelines and pull request checks?▼

You can integrate vulnerability scanning into CI pipelines and pull request checks to surface security findings early, applying automated analysis across languages and frameworks to detect issues before merging code.

Does automated security scanning work across multiple programming languages and frameworks?▼

Automated security scanning works across multiple programming languages and frameworks, applying to local development, CI pipelines, and pull requests to detect SQL injection, XSS, hardcoded secrets, and missing input validation.

What is the best way to detect hardcoded secrets and insecure authentication in a codebase?▼

The best way to detect hardcoded secrets and insecure authentication in a codebase is to run an automated vulnerability scan that identifies these weaknesses and outputs a structured report with line numbers, severities, and remediation steps.

Related Skills

Explore More Software Engineering Skills→
natslashnatslash

security-reviewer

Identify security vulnerabilities in source code and provide remediation guidance.

Community
Advanced
ssiumhassiumha
9

review-security

Identify security issues in code changes with severity-ranked Markdown reports.

Community
Basic
LiamVDB1LiamVDB1

springboot-verification

Automate Spring Boot verification pipelines with build, static analysis, tests, and security scans.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced