Scan codebases for SAST, secrets, and dependency vulnerabilities.
npx skills add https://github.com/wyattowalsh/agents --skill security-scanner-wyattowalsh
Please help me install this Agent Skill. Skill: security-scanner Source: https://github.com/wyattowalsh/agents/tree/main/skills/security-scanner Command: npx skills add https://github.com/wyattowalsh/agents --skill security-scanner-wyattowalsh
This Skill proactively identifies security vulnerabilities and compliance risks within your codebase before deployment, helping you prevent breaches and maintain a strong security posture.
Use the security-scanner skill to perform a full scan of the current directory.
High-intent search queries and answers about installing and using this skill.
Codebase vulnerability scanning before deployment is performed using Static Application Security Testing (SAST), hardcoded secrets detection, and dependency analysis to identify risks like SQL injection or exposed API keys.
SAST is Static Application Security Testing that analyzes source code to find security weaknesses. Findings are mapped to CWE and OWASP categories to standardize vulnerability identification and remediation tracking.
Compliance checks against SOC2, GDPR, and HIPAA standards are supported through heuristic scoring. The scan evaluates your codebase to verify alignment with basic security controls required by these frameworks.
Hardcoded secrets detection scans your codebase using pattern matching to proactively identify exposed API keys and credentials, preventing accidental commits of sensitive information before deployment.
Python is required because the detailed analysis and pattern matching for SAST, secrets detection, and dependency scanning rely on Python scripts to execute the security assessment logic.
Dependency vulnerability analysis is best conducted as part of a comprehensive security scan, checking your project dependencies against known vulnerability databases to identify outdated or compromised packages.
JosiahSiegelIntegrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.
vadimcomanescuAssess security posture and generate compliance evidence for scoped systems.
spallempatiIntegrate SAST tools into CI/CD to block pull requests with high-severity findings.
jassicsAutomate MASTG-based mobile penetration tests on Android and iOS apps.
