vulnerability-scanner

What problem does it solve?

This Skill automates the detection of security vulnerabilities in codebases by analyzing dependencies, secrets, risky code patterns, and configuration gaps.

Core Features & Use Cases

• Dependency checks with optional npm/yarn/pip audit and lockfile analysis.
• Secrets detection for API keys, tokens, passwords, and cloud credentials.
• Code-pattern analysis for injection, deserialization, and insecure coding patterns.
• Configuration validation to highlight insecure settings and missing security headers.
• Use Case: integrate into CI to fail builds when high-risk findings are discovered.

Quick Start

Run the vulnerability scanner against a project: python3 scripts/security_scan.py /path/to/project