skills.rest
mehdiozdemir
mehdiozdemirCOMMUNITY
Explore all skills by this author →
GitHub

security-scanner

Analyzes code to identify vulnerabilities, misconfigurations, and attack vectors.

2|2|Updated Jan 16, 2026
Search Tags:#security#vulnerability#owasp#compliance#static-analysis#code-review#secret-detection
One-click install
npx skills add https://github.com/mehdiozdemir/awesome-agent-skills --skill security-scanner-mehdiozdemir
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/mehdiozdemir/awesome-agent-skills/tree/main/skills/security-scanner
Command: npx skills add https://github.com/mehdiozdemir/awesome-agent-skills --skill security-scanner-mehdiozdemir

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes code to identify security vulnerabilities, misconfigurations, and potential attack vectors. Use this skill when auditing codebases for OWASP Top 10 vulnerabilities, reviewing authentication/authorization implementations, checking for secret exposure, validating cryptographic practices, or performing security-focused code reviews.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Detects common web security risks and maps issues to CWE categories.
  • Secret Detection: Flags exposed credentials and sensitive data in code and configuration.
  • Structured Security Scan: Provides step-by-step analysis, severity assessment, and remediation guidance.

Quick Start

Run a security assessment on your codebase to identify vulnerabilities and misconfigurations.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities?▼

To scan for OWASP Top 10 vulnerabilities, this skill analyzes your codebase to identify common web security risks, mapping discovered issues directly to CWE categories for structured classification and remediation.

Can static analysis detect exposed secrets and credentials in my code?▼

Yes, static analysis via this skill detects secret exposure by flagging exposed credentials and sensitive data hidden within your source code and configuration files during the security review process.

What is the best way to audit authentication and cryptographic practices in source code?▼

The best way to audit authentication and cryptographic practices is using a structured security scan, which validates your implementations, assigns severity levels to flaws, and provides targeted secure coding recommendations.

Does this security scanner work across different programming languages and architectures?▼

Yes, this security scanner works across different programming languages and architectures, applying vulnerability discovery and compliance review techniques to analyze codebases regardless of their underlying tech stack.

How do I get remediation guidance after finding security misconfigurations?▼

To get remediation guidance for security misconfigurations, this skill implements a structured process that automatically classifies vulnerability severity and delivers actionable secure coding recommendations to fix the identified attack vectors.

Related Skills

Explore More Software Engineering Skills→
devopstalesdevopstales
1

semgrep-security

Scan source code for security vulnerabilities and code quality issues with Semgrep.

Community
Intermediate
dnvitidnviti
10

vulnerability-create

Generate structured remediation tasks from security vulnerability findings with severity classification.

Community
Intermediate
rhpdsrhpds

24-security-first-development

Configure Claude Code security scanning and validation hooks for development workflows.

Official
Advanced
outfitter-devoutfitter-dev
28

security-engineering

Audit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.

Official
Advanced