vuln-scan

Scan dependencies, containers, Kubernetes manifests, and secrets for critical vulnerabilities.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/mykaarma/claude-sutras --skill vuln-scan-mykaarma
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vuln-scan
Source: https://github.com/mykaarma/claude-sutras/tree/main/skills/vuln-scan
Command: npx skills add https://github.com/mykaarma/claude-sutras --skill vuln-scan-mykaarma

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Developers need to find critical and high‑severity security issues in their code, dependencies, containers, and configuration before releasing software.

Core Features & Use Cases

  • Detect vulnerable packages in Node.js, Python, Go, and Java projects.
  • Scan Docker images and Kubernetes manifests for known CVEs and misconfigurations.
  • Search Git history for hard‑coded secrets and exposed credentials.
  • Provide a concise table of findings with remediation commands.

Quick Start

Ask the assistant to run a full security scan on the current project.

Frequently Asked Questions about vuln-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan for critical vulnerabilities in Docker images and Kubernetes manifests?

You can scan for vulnerabilities across Node.js, Python, Go, and Java by running language-specific audit tools that check project dependencies for critical and high severity issues.

How do I find exposed secrets and hard-coded credentials in my Git history?

To find exposed secrets, the vulnerability scan searches Git history and source code repositories using specialized secret detection utilities to locate hard-coded credentials before release.

Can I run a full security scan on my local development environment?

Yes, you can run a full security scan locally to detect vulnerable packages, container CVEs, Kubernetes misconfigurations, and secret exposures across your source code repositories during development.

Does the vulnerability scan report include remediation commands for findings?

The scan filters vulnerability results to only report critical and high severity findings across code, containers, and Kubernetes configs, reducing noise from lower severity issues.