security-scanner

Analyzes code to identify vulnerabilities, misconfigurations, and attack vectors.

2|2|Updated Jan 16, 2026

Search Tags:#security #vulnerability #owasp #compliance #static-analysis #code-review #secret-detection

Ready to run

npx skills add https://github.com/mehdiozdemir/awesome-agent-skills --skill security-scanner-mehdiozdemir

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/mehdiozdemir/awesome-agent-skills/tree/main/skills/security-scanner
Command: npx skills add https://github.com/mehdiozdemir/awesome-agent-skills --skill security-scanner-mehdiozdemir

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes code to identify security vulnerabilities, misconfigurations, and potential attack vectors. Use this skill when auditing codebases for OWASP Top 10 vulnerabilities, reviewing authentication/authorization implementations, checking for secret exposure, validating cryptographic practices, or performing security-focused code reviews.

Core Features & Use Cases

OWASP Top 10 Coverage: Detects common web security risks and maps issues to CWE categories.
Secret Detection: Flags exposed credentials and sensitive data in code and configuration.
Structured Security Scan: Provides step-by-step analysis, severity assessment, and remediation guidance.

Quick Start

Run a security assessment on your codebase to identify vulnerabilities and misconfigurations.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for OWASP Top 10 vulnerabilities?▼

To scan for OWASP Top 10 vulnerabilities, this skill analyzes your codebase to identify common web security risks, mapping discovered issues directly to CWE categories for structured classification and remediation.

Can static analysis detect exposed secrets and credentials in my code?▼

Yes, static analysis via this skill detects secret exposure by flagging exposed credentials and sensitive data hidden within your source code and configuration files during the security review process.

What is the best way to audit authentication and cryptographic practices in source code?▼

The best way to audit authentication and cryptographic practices is using a structured security scan, which validates your implementations, assigns severity levels to flaws, and provides targeted secure coding recommendations.

Does this security scanner work across different programming languages and architectures?▼

Yes, this security scanner works across different programming languages and architectures, applying vulnerability discovery and compliance review techniques to analyze codebases regardless of their underlying tech stack.

How do I get remediation guidance after finding security misconfigurations?▼

To get remediation guidance for security misconfigurations, this skill implements a structured process that automatically classifies vulnerability severity and delivers actionable secure coding recommendations to fix the identified attack vectors.