skills.rest
PaulKinlan
PaulKinlanCOMMUNITY
Explore all skills by this author →
Website𝕏@paul_kinlanGitHub

vulnerability-scan

Scan source code for security vulnerabilities using OWASP methodology and CLI tools.

2|Updated Feb 4, 2026
Search Tags:#security#vulnerability#owasp#secrets#dependency check#code scan
One-click install
npx skills add https://github.com/PaulKinlan/docker-agent-test --skill vulnerability-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scan
Source: https://github.com/PaulKinlan/docker-agent-test/tree/main/config/skills/security/vulnerability-scan
Command: npx skills add https://github.com/PaulKinlan/docker-agent-test --skill vulnerability-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of identifying security vulnerabilities within source code, helping to prevent data breaches and system compromises.

Core Features & Use Cases

  • Comprehensive Scanning: Covers critical areas like hardcoded secrets, injection risks, authentication flaws, and data exposure.
  • Dependency Auditing: Checks for known vulnerabilities in project dependencies (npm, pip).
  • Use Case: Before deploying a new feature, run this skill to ensure no sensitive API keys are accidentally committed and that the code is protected against common injection attacks.

Quick Start

Run a security vulnerability scan on the current workspace directory.

Frequently Asked Questions about vulnerability-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for security vulnerabilities and hardcoded secrets?▼

This skill scans source code for security vulnerabilities and hardcoded secrets using OWASP methodology and command-line tools. It identifies injection risks, authentication flaws, and data exposure within your workspace directory.

Can I check my project dependencies for known vulnerabilities with npm audit and pip audit?▼

Yes, you can check project dependencies for known vulnerabilities as the scan integrates directly with npm audit and pip audit to identify security flaws within your dependency tree.

What security risks does an OWASP code scan cover?▼

An OWASP code scan covers critical security risks including hardcoded secrets, injection vulnerabilities, authentication and authorization issues, and data exposure, while also auditing dependencies for known flaws.

What is the best way to prevent accidental API key exposure in committed code?▼

The best way to prevent accidental API key exposure is to run a security vulnerability scan before deployment, which detects hardcoded secrets and sensitive credentials committed within your source code.

Do I need to install external dependencies to run a vulnerability code scan?▼

No external dependencies are required to run the vulnerability code scan as the skill operates independently using integrated scripts and standard command-line tools to analyze your workspace directory.

Related Skills

Explore More Software Engineering Skills→
ievo-aiievo-ai

vuln-scan

Scan source code modules for vulnerabilities and validate exploit chains.

Official
Advanced
HomericIntelligenceHomericIntelligence
18

quality-security-scan

Scan code for security vulnerabilities and unsafe patterns.

Official
Intermediate
zm2231zm2231

dependency-manager

Identify and remediate outdated, vulnerable, or conflicting software dependencies.

Community
Advanced
benjaminshoemakerbenjaminshoemaker
39

security-scan

Scan codebases for dependency vulnerabilities, risky patterns, and secrets.

Community
Intermediate