vulnerability-scanner

Threat modeling maps attack surfaces by identifying assets, threat actors, and attack vectors to design resilient systems. This skill provides a structured framework guiding you through each identification step to proactively secure your architecture.

Vulnerability remediation prioritization uses a decision-making matrix based on CVSS and EPSS scores to address critical risks first. This approach ensures your security efforts focus on the most exploitable and severe threats within your software.

Automated security validation executes through integrated Python-based scanning scripts provided within the skill. You run the security scan script by supplying the target project path to analyze supply chain security and validate vulnerabilities.

OWASP Top 10 compliance checks are fully supported through comprehensive security auditing checklists. These checklists harden applications against common exploits by verifying your software development lifecycle against OWASP 2025 principles.

Auditing supply chain security risks involves applying comprehensive checklists to identify vulnerabilities during the software development lifecycle. This skill maps your attack surface and prioritizes threats according to industry standards like OWASP 2025.

Risk-based remediation prioritization is needed when managing complex modern security threats where resources are limited. It implements a decision matrix using CVSS and EPSS scores to ensure the most critical vulnerabilities are resolved immediately.