skills.rest
y1feng200156
y1feng200156COMMUNITY
Explore all skills by this author →
WebsiteGitHub

vuln-scan

Scan project dependencies for known security vulnerabilities using Safety CLI and OSV-Scanner.

33|5|Updated Jan 2, 2026
Search Tags:#ci/cd#security#python#javascript#dependency analysis#vulnerability scanning#osv-scanner
One-click install
npx skills add https://github.com/y1feng200156/ham-study --skill vuln-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-scan
Source: https://github.com/y1feng200156/ham-study/tree/main/.agent/skills/vuln-scan
Command: npx skills add https://github.com/y1feng200156/ham-study --skill vuln-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the detection of security vulnerabilities within project dependencies across multiple programming languages, helping to secure your software supply chain.

Core Features & Use Cases

  • Multi-language Support: Scans Python, JavaScript, Java, Go, Rust, Ruby, PHP, and C/C++ projects.
  • Dual Scanning Engines: Utilizes both Safety CLI (AI-enhanced) and OSV-Scanner (Google open source) for comprehensive coverage.
  • CI/CD Integration: Easily integrates into automated pipelines to break builds on critical vulnerabilities.
  • Use Case: Before deploying your web application, run this Skill to identify any known vulnerabilities in your project's npm packages and Python libraries, preventing potential security breaches.

Quick Start

Run the vuln-scan skill to scan your project's dependencies for security vulnerabilities.

Frequently Asked Questions about vuln-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan project dependencies for known security vulnerabilities across multiple programming languages?▼

You scan dependencies for security vulnerabilities using Safety CLI and OSV-Scanner engines. This Skill automates detection across Python, JavaScript, Java, Go, Rust, Ruby, PHP, and C/C++ projects to identify supply chain risks.

What is the best way to integrate dependency vulnerability scanning into a CI/CD pipeline?▼

Integrating vulnerability scanning into CI/CD pipelines allows you to break builds on detecting critical security flaws. This Skill uses Safety CLI and OSV-Scanner to audit dependencies during automated workflows.

Does this dependency vulnerability scanner work with both Python and JavaScript projects?▼

Yes, vulnerability scanning supports Python and JavaScript projects alongside Java, Go, Rust, Ruby, PHP, and C/C++. It utilizes Safety CLI and OSV-Scanner to provide comprehensive multi-language coverage.

Do I need to install Safety CLI and OSV-Scanner before scanning dependencies?▼

Yes, you need Safety CLI and OSV-Scanner installed and configured for your specific ecosystems before scanning dependencies. These dual engines are required to detect known security vulnerabilities across your project libraries.

Why use both Safety CLI and OSV-Scanner for software supply chain risk management?▼

Using both Safety CLI and OSV-Scanner for vulnerability scanning provides comprehensive coverage. Safety CLI offers AI-enhanced detection while OSV-Scanner contributes Google open-source database access for thorough security auditing.

Related Skills

Explore More Software Engineering Skills→
tapanshahtapanshah

Dependency Auditor

Analyze software dependencies for CVEs and license compliance across multiple languages.

Community
Advanced
burgebjburgebj

cso

Automate security audits and vulnerability checks across a codebase.

Community
Advanced
as4584as4584
2

gitlab-ci-patterns

Generate GitLab CI/CD pipeline configurations for multi-stage builds and deployments.

Community
Intermediate
daishimandaishiman
6

dependency-security-scanning

Audits software dependencies to detect known vulnerabilities and supply chain risks.

Community
Intermediate