skills.rest
nikhillinit
nikhillinitCOMMUNITY
Explore all skills by this author →
GitHub

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Updated Jul 21, 2025
Search Tags:#OWASP#security#dependencies#IaC#secrets#scanning#SAST
One-click install
npx skills add https://github.com/nikhillinit/Updog_restore --skill security-scanner-nikhillinit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/nikhillinit/Updog_restore/tree/main/.claude/skills/workflow-engine/security-scanner
Command: npx skills add https://github.com/nikhillinit/Updog_restore --skill security-scanner-nikhillinit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

The Security Scanner Skill provides comprehensive security analysis for codebases, detecting vulnerabilities, exposed secrets, security misconfigurations, and compliance violations. It combines Static Application Security Testing (SAST), secret detection, OWASP Top 10 checks, container security, and Infrastructure as Code (IaC) validation.

Core Features & Use Cases

  • Static Application Security Testing (SAST) for common vulnerabilities
  • Secret and credential detection (API keys, passwords, tokens)
  • OWASP Top 10 vulnerability checks
  • Container security checks for Dockerfiles and images
  • Infrastructure as Code (Terraform, CloudFormation, Kubernetes) validation
  • Dependency vulnerability scanning and license compliance
  • Pre-commit security checks and PR security reviews

Quick Start

Run the security scanner against the repository to generate a security report, or integrate into CI to gate deployments.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and exposed secrets?▼

Security scanning detects vulnerabilities, exposed secrets, and misconfigurations across your codebase using SAST, secret detection, and OWASP Top 10 checks. Run the scanner against your repository to generate a comprehensive security report identifying issues across code, dependencies, and infrastructure configurations.

Can I use security scanning in pull request reviews and CI/CD pipelines?▼

Yes, the scanner integrates into CI/CD workflows and pre-commit checks to gate deployments. It validates code before merge, catches vulnerabilities during PR reviews, and blocks deployments when security issues are detected, enabling continuous security validation.

What types of security checks does the scanner perform?▼

The scanner performs Static Application Security Testing (SAST), secret and credential detection, OWASP Top 10 vulnerability checks, container security validation for Dockerfiles, Infrastructure as Code (Terraform, CloudFormation, Kubernetes) validation, and dependency vulnerability scanning with remediation guidance.

Does security scanning support Infrastructure as Code configurations?▼

Yes, the scanner validates IaC security by analyzing Terraform, CloudFormation, and Kubernetes configurations for misconfigurations, compliance violations, and security risks. It identifies insecure defaults and policy violations across infrastructure definitions.

How do I detect API keys and credentials in my repository?▼

Secret detection scans your codebase for exposed API keys, passwords, tokens, and other credentials. The scanner identifies leaked secrets across files and generates structured output with remediation guidance to help you rotate and secure exposed credentials.

Related Skills

Explore More Software Engineering Skills→
chadanandachadananda

security-scan

Detect API keys, tokens, and secrets in code, configs, and docs.

Community
Intermediate
webrix-aiwebrix-ai
1

vulnerability-prioritization

Correlate CVE scan results with infrastructure to prioritize patching and create Jira tickets.

Official
Advanced
ToanPV90ToanPV90

container-scanning

Scan container images for vulnerabilities and misconfigurations using Trivy and Grype.

Community
Advanced
mohitmishra786mohitmishra786

security

Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.

Community
Advanced