vulnerability-scanner

Automate vulnerability analysis of codebases for dependencies, secrets, and code patterns.

132|22|Updated Dec 18, 2025

Search Tags:#security #dependencies #secrets #analyze #code-patterns #OWASP-2025

Ready to run

npx skills add https://github.com/xenitV1/Antigravity-Workflows --skill vulnerability-scanner

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/xenitV1/Antigravity-Workflows/tree/main/skills/vulnerability-scanner
Command: npx skills add https://github.com/xenitV1/Antigravity-Workflows --skill vulnerability-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the detection of security vulnerabilities in codebases by analyzing dependencies, secrets, risky code patterns, and configuration gaps.

Core Features & Use Cases

Dependency checks with optional npm/yarn/pip audit and lockfile analysis.
Secrets detection for API keys, tokens, passwords, and cloud credentials.
Code-pattern analysis for injection, deserialization, and insecure coding patterns.
Configuration validation to highlight insecure settings and missing security headers.
Use Case: integrate into CI to fail builds when high-risk findings are discovered.

Quick Start

Run the vulnerability scanner against a project: python3 scripts/security_scan.py /path/to/project

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automatically detect vulnerabilities in my codebase?▼

Vulnerability detection scans codebases for dependencies, secrets, risky code patterns, and misconfigurations using automated analysis. Run the scanner against your project directory to surface OWASP 2025–aligned risks, supply-chain concerns, and configuration gaps in a single pass.

Can I integrate vulnerability scanning into my CI pipeline?▼

Yes, vulnerability scanning integrates into CI workflows to automate security checks on every commit. Configure the scanner to fail builds when high-risk findings are discovered, enforcing security gates before deployment.

What types of security issues does dependency analysis detect?▼

Dependency analysis checks for known vulnerabilities in npm, yarn, and pip packages by auditing lockfiles and package manifests. It identifies outdated or compromised dependencies that pose supply-chain risks to your project.

How does secrets detection work in code scanning?▼

Secrets detection scans codebases for exposed API keys, tokens, passwords, and cloud credentials using pattern matching. It surfaces accidental credential commits before they reach version control or production environments.

What are dangerous code patterns and how are they detected?▼

Code-pattern analysis identifies injection vulnerabilities, unsafe deserialization, and insecure coding practices that create exploitable attack surface. Patterns are matched against OWASP 2025 risk categories to flag practices that violate secure coding standards.