skills.rest
cyperx84
cyperx84COMMUNITY
Explore all skills by this author →
GitHub

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

2|Updated Oct 15, 2025
Search Tags:#security#CI/CD#dependencies#reporting#vulnerabilities#code#analyze
One-click install
npx skills add https://github.com/cyperx84/claude-code-plugin-examples --skill vulnerability-detection
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Vulnerability Detection
Source: https://github.com/cyperx84/claude-code-plugin-examples/tree/main/examples/04-real-world/security-audit-plugin/skills/vulnerability-detection
Command: npx skills add https://github.com/cyperx84/claude-code-plugin-examples --skill vulnerability-detection

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured approach to detect security vulnerabilities across code, dependencies, and infrastructure, helping teams identify weaknesses early and improve risk posture.

Core Features & Use Cases

  • Automated vulnerability scanning: analyzes source code, configuration files, and dependency manifests to surface known vulnerabilities.
  • Threat coverage: includes patterns and checks aligned with OWASP Top 10 (e.g., SQL injection, XSS, CSRF, misconfigurations) and produces prioritized remediation guidance.
  • Use Case: In a CI pipeline, run vulnerability detection after dependency installation to generate a security report and actionable fixes for developers.

Quick Start

Run the vulnerability-detection workflow against your codebase to generate a comprehensive report.

Frequently Asked Questions about Vulnerability Detection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What does automated vulnerability detection check for in source code and infrastructure?▼

Vulnerability detection analyzes source code, configuration files, and dependency manifests to identify security gaps. It checks for OWASP Top 10 vulnerabilities like SQL injection, XSS, and misconfigurations to help teams improve their risk posture.

Does vulnerability detection cover OWASP Top 10 threats like SQL injection and XSS?▼

Yes, you can generate actionable security reports during the build process. The detection workflow analyzes your codebase and dependencies to produce structured findings with prioritized remediation guidance for developers.

What files and manifests do I need to provide for dependency and code vulnerability scanning?▼

Yes, vulnerability detection includes patterns and checks aligned with the OWASP Top 10. It identifies threats like SQL injection, XSS, CSRF, and misconfigurations, providing prioritized fixes to remediate these security gaps.

When should I run vulnerability detection across development, build, and production stages?▼

You need to provide access to source code, configuration files, and dependency manifests. These inputs are required to analyze your software project and produce structured vulnerability findings and concrete remediation steps.

When should I run vulnerability detection across development, build, and production stages?▼

Run vulnerability detection during development, build, and production stages to identify weaknesses early. Applying automated scanning across these stages ensures continuous assessment of code, dependencies, and deployment environments.

Related Skills

Explore More Software Engineering Skills→
Snowflake-LabsSnowflake-Labs
12

read-ors-configuration

A concise summary of your roleplay character: name,</name> personality, and/or behavior, formatted as a single string sentence. Typically不超过50字，此处省略

Official
Intermediate
nksethnkseth

security-reviewer

Identify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.

Community
Advanced
pantheon-orgpantheon-org
9

jenkinsfile-generator

Generate Declarative and Scripted Jenkinsfiles with stages, agents, and security scanning.

Official
Advanced
koya-altkoya-alt

security_scan

Scan codebases for dependency, static, and data-flow vulnerabilities.

Community
Advanced