skills.rest
mkolb22
mkolb22COMMUNITY
Explore all skills by this author →
GitHub

Security Vulnerability Scanning

Detect OWASP-style security vulnerabilities in JavaScript, TypeScript, backend, and web app code.

Updated Aug 23, 2026
Search Tags:#security#vulnerability#owasp#static-analysis#code-review#scanning#security-testing
One-click install
npx skills add https://github.com/mkolb22/zen-plugin --skill security-vulnerability-scanning
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Vulnerability Scanning
Source: https://github.com/mkolb22/zen-plugin/tree/main/skills/security-vulnerability-scanning
Command: npx skills add https://github.com/mkolb22/zen-plugin --skill security-vulnerability-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detects and surfaces security vulnerabilities during quality reviews to prevent insecure production code and reduce risk across the codebase.

Core Features & Use Cases

  • Automated vulnerability detection across JavaScript/TypeScript, backend services, and web apps.
  • OWASP coverage with actionable remediation guidance and severity tagging.
  • Consistent, repeatable security checks during the quality review workflow.

Quick Start

Review code changes and run automated vulnerability scans to surface critical issues before merging.

Frequently Asked Questions about Security Vulnerability Scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities during a code review?▼

You can scan code for security vulnerabilities by running automated, rule-based detection on user input handling and API usage. This surfaces OWASP-style flaws with severity tagging and actionable remediation guidance before code merges.

What is OWASP-style static analysis for JavaScript and backend services?▼

OWASP-style static analysis is a deterministic code review mechanism that identifies security vulnerabilities in JavaScript or backend services. It applies rule-based checks to data processing and external API usage to prevent insecure production code.

Can I detect authentication flow vulnerabilities in web apps automatically?▼

Yes, you can detect authentication flow vulnerabilities automatically by scanning web apps with rule-based detection. The process tags severity levels and provides actionable remediation steps to support secure coding practices.

Does static analysis work for finding security flaws in TypeScript code?▼

Static analysis works for finding security flaws in TypeScript code by applying deterministic checks across user input handling and data processing. It surfaces vulnerabilities with severity tagging and remediation guidance during quality reviews.

What is the best way to prevent production defects caused by insecure external API usage?▼

The best way to prevent production defects from insecure external API usage is running automated vulnerability scans during code reviews. This identifies OWASP-style patterns, tags severity, and provides actionable remediation guidance before merging.

Related Skills

Explore More Software Engineering Skills→
realsigridjinrealsigridjin
20

security-review

Identify and prioritize security vulnerabilities with OWASP Top 10 analysis.

Community
Advanced
YH-05YH-05
1

scan

Scan codebases for OWASP Top 10 vulnerabilities and code quality issues.

Community
Advanced
rhpdsrhpds

24-security-first-development

Configure Claude Code security scanning and validation hooks for development workflows.

Official
Advanced
eliottbusinesseliottbusiness

requesting-code-review

Automate pre-commit code review with static analysis and security scanning.

Community
Advanced