vuln-scanner

Scan dependencies, container images, and infrastructure for CVEs with prioritization.

Updated May 13, 2026
One-click install
npx skills add https://github.com/Mekann2904/mekann --skill vuln-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vuln-scanner
Source: https://github.com/Mekann2904/mekann/tree/main/.pi/lib/skills/vuln-scanner
Command: npx skills add https://github.com/Mekann2904/mekann --skill vuln-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within software projects, protecting against potential breaches and data loss.

Core Features & Use Cases

  • Dependency Scanning: Detects known vulnerabilities (CVEs) in project dependencies across various languages (Node.js, Python).
  • Container Security: Scans container images for known vulnerabilities using tools like Trivy.
  • Prioritization & Remediation: Helps prioritize risks based on severity and provides guidance on fixing vulnerabilities.
  • Use Case: A developer can use this Skill to automatically scan their Node.js project for high-severity vulnerabilities before deploying to production, ensuring a more secure release.

Quick Start

Run a comprehensive vulnerability scan on the current project's dependencies.

Frequently Asked Questions about vuln-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Node.js and Python dependencies for known CVEs?

Vulnerability scanning detects known CVEs in project dependencies across Node.js and Python using tools like npm audit and pip-audit. It automates security risk detection and provides guidance on fixing vulnerabilities before deployment.

Can I use Trivy to scan container images for security vulnerabilities?

Yes, you can use Trivy to scan container images for known security vulnerabilities. It detects risks within containerized applications and helps prioritize remediation based on CVSS severity scores.

What is the best way to prioritize security risks found in project dependencies?

The best way to prioritize security risks is by evaluating their CVSS scores. Vulnerability scanning ranks detected CVEs by severity, helping you focus on high-risk issues first and suggesting specific remediation steps.

Does vulnerability scanning work for both application dependencies and infrastructure configurations?

Yes, vulnerability scanning works for application dependencies and infrastructure configurations. It analyzes software vulnerabilities across Node.js, Python, container images, and infrastructure to detect CVEs and mitigate security risks.

How do I get remediation steps after detecting vulnerabilities in my code?

To get remediation steps after detecting vulnerabilities, you run a comprehensive vulnerability scan on your dependencies. The scan analyzes CVEs and provides prioritized guidance on fixing vulnerabilities based on their severity scores.