skills.rest
Ab-aswini
Ab-aswiniCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vulnerability-scanner

Scan project dependencies, code patterns, secrets, and configurations for security vulnerabilities.

2|Updated Feb 15, 2026
Search Tags:#security#vulnerability#owasp#risk assessment#secrets#scanning#supply chain
One-click install
npx skills add https://github.com/Ab-aswini/Agent-kit-P1 --skill vulnerability-scanner-ab-aswini
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Ab-aswini/Agent-kit-P1/tree/main/.agent-os/skills/vulnerability-scanner
Command: npx skills add https://github.com/Ab-aswini/Agent-kit-P1 --skill vulnerability-scanner-ab-aswini

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for identifying and prioritizing security vulnerabilities within a project, ensuring robust defenses against evolving cyber threats.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes dependencies, code patterns, secrets, and configurations for security weaknesses.
  • OWASP Compliance: Aligns with OWASP Top 10 principles, focusing on modern threats like supply chain security.
  • Risk Prioritization: Helps focus remediation efforts on the most critical vulnerabilities based on CVSS, EPSS, and business context.
  • Use Case: Before deploying a new feature, run this Skill to automatically scan for hardcoded secrets, injection vulnerabilities, and outdated dependencies, providing a clear report of risks and their severity.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my project for hardcoded secrets and security vulnerabilities?▼

You can scan project dependencies, code patterns, and configurations automatically. It identifies risks aligned with OWASP Top 10, including supply chain security and injection flaws, prioritizing findings based on severity and exploitability.

What is the best way to assess security risks in software supply chain dependencies?▼

Performing a dependency scan prioritizes vulnerabilities using CVSS, EPSS, and business context, focusing remediation efforts on the most critical supply chain risks and injection flaws.

Does this automated vulnerability scanner support OWASP Top 10 compliance checks?▼

Yes, it aligns with OWASP Top 10 principles, focusing on modern threats like supply chain security and injection flaws across dependencies, code patterns, secrets, and configurations.

Can I run a targeted security scan for just secrets or dependency vulnerabilities?▼

Yes, it supports various scan types including all, deps, secrets, patterns, and config, allowing you to perform targeted security analysis on specific project areas.

How are vulnerability scan findings prioritized for remediation efforts?▼

Findings are prioritized based on severity and exploitability, utilizing CVSS, EPSS, and business context to help focus remediation efforts on the most critical risks.

Related Skills

Explore More Software Engineering Skills→
phuonghxphuonghx
1

vulnerability-scanner

Scan source code, configuration files, and dependencies for security vulnerabilities.

Community
Advanced
sugarforeversugarforever
131

Next.js Security Scan

Scan Next.js and TypeScript/JavaScript projects for security vulnerabilities.

Community
Advanced
OmarMiraOmarMira

vulnerability-scanner

Scan project dependencies, code patterns, secrets, and configurations for security vulnerabilities.

Community
Advanced
wyattowalshwyattowalsh
4

security-scanner

Scan codebases for SAST, secrets, and dependency vulnerabilities.

Community
Advanced