Scan codebases statically and output VULN-FINDINGS.json and VULN-FINDINGS.md.
npx skills add https://github.com/air-gapped/skills --skill vuln-scan-air-gapped
Please help me install this Agent Skill. Skill: vuln-scan Source: https://github.com/air-gapped/skills/tree/main/.claude/skills/vuln-scan Command: npx skills add https://github.com/air-gapped/skills --skill vuln-scan-air-gapped
Static vulnerability review of a codebase to identify potential security issues without executing any code, enabling fast risk awareness early in development.
Provide a static review of the target directory, listing candidate vulnerabilities without executing any code.
High-intent search queries and answers about installing and using this skill.
Static vulnerability review scans repository-scale targets to surface potential security issues without executing code. It outputs VULN-FINDINGS.json and VULN-FINDINGS.md files for downstream triage and patch teams.
Yes, you can provide optional THREAT_MODEL.md guidance to focus the security audit on specific areas like memory safety, injection, or auth. You can also use --focus and --extra commands to refine the analysis scope.
Generate machine-readable VULN-FINDINGS.json and human-readable VULN-FINDINGS.md files. These outputs support direct ingestion by the /triage workflow, providing structured scoring for patch teams to act upon.
Yes, the static vulnerability scanner supports multi-agent fan-out for repository-scale targets. It maintains a read-only review scope and uses a structured scoring workflow suitable for triage ingestion.
Read-only static code review cannot detect runtime vulnerabilities or execute code paths. It enforces a read-only review scope to surface potential issues based on static analysis, requiring downstream triage to confirm actual exploitability.
giladresisiAnalyze directory structure and file counts for a codebase overview.
SocketDevScan source files for static vulnerabilities and output VULN-FINDINGS.json and Markdown.
SzantoiPerform STRIDE threat modeling and vulnerability assessment for application security.
bugrabilgeDetect security vulnerabilities in code, running apps, and dependencies.
