skills.rest
telagod
telagodCOMMUNITY
Explore all skills by this author →
GitHub

verify-security

Scan codebases offline and report security vulnerabilities with severity and remediation guidance.

238|30|Updated Feb 2, 2026
Search Tags:#automation#security#vulnerability#owasp#risk-assessment#code-scanning
One-click install
npx skills add https://github.com/telagod/code-abyss --skill verify-security-telagod
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: verify-security
Source: https://github.com/telagod/code-abyss/tree/main/skills/tools/verify-security
Command: npx skills add https://github.com/telagod/code-abyss --skill verify-security-telagod

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

安全校验关卡通过自动化代码安全漏洞扫描，帮助团队在交付前发现并记录安全风险，提升代码安全性和合规性。

Core Features & Use Cases

  • 自动化漏洞检测：覆盖注入、敏感信息暴露、XSS、SSRF 等常见风险类型。
  • 适用场景广泛：新建模块、变更安全相关内容、攻防演练和重构任务等均需进行安全评估。
  • 产出可追溯的报告：提供逐项风险、严重度、推荐修复策略等。

Quick Start

Run the security scanner against a codebase to generate a comprehensive vulnerability report.

Frequently Asked Questions about verify-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security checks to find vulnerabilities in my codebase?▼

Security vulnerability scanning identifies risks like injection, sensitive data exposure, XSS, and SSRF by analyzing codebases offline. It is essential for new modules, red/blue team tasks, and refactors where safety and compliance matter before delivery.

Does this automated code scanning cover common OWASP risk types?▼

Yes, automated code scanning provides cross-language coverage for common OWASP risk types including injection, sensitive data exposure, XSS, and SSRF. It applies security assessments to changes and outputs structured reports with severity levels.

What is the best way to generate a structured vulnerability report for compliance?▼

To assess security risks, run the scanner against your codebase to perform an offline scan. This generates a comprehensive vulnerability report covering injection and sensitive data exposure, providing severity and remediation guidance for compliance.

Can I use this security scanner for red team and blue team codebase assessments?▼

Security vulnerability scanning identifies risks like injection, sensitive data exposure, XSS, and SSRF by analyzing codebases offline. It is essential for new modules, red/blue team tasks, and refactors where safety and compliance matter before delivery.

Does offline code scanning require any external dependencies to detect security risks?▼

Yes, automated code scanning provides cross-language coverage for common OWASP risk types including injection, sensitive data exposure, XSS, and SSRF. It applies security assessments to changes and outputs structured reports with severity levels.

What is the best way to generate a structured vulnerability report for compliance?▼

To assess security risks, run the scanner against your codebase to perform an offline scan. This generates a comprehensive vulnerability report covering injection and sensitive data exposure, providing severity and remediation guidance for compliance.

Related Skills

Explore More Software Engineering Skills→
dapperdiversdapperdivers
1

run-full-scan

Orchestrate reconnaissance, vulnerability scanning, source auditing, and report generation for penetration tests.

Community
Advanced
silenvxsilenvx
1

troubleshooting

Diagnose and resolve development workflow errors using TROUBLESHOOTING.md guidance.

Community
Basic
omeraltnomeraltn

agency-api-tester

Validate RESTful API functionality, security, and performance in CI/CD pipelines.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced