skills.rest
alaminmain
alaminmainCOMMUNITY
Explore all skills by this author →
𝕏@alaminmainGitHub

vulnerability-scanner

Scan codebases for dependencies, secrets, code patterns, and configurations, producing structured JSON reports.

Updated Dec 22, 2025
Search Tags:#static analysis#OWASP#dependencies#security audit#secrets#code patterns#vulnerability scanning
One-click install
npx skills add https://github.com/alaminmain/DoorAuthServer --skill vulnerability-scanner-alaminmain
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/alaminmain/DoorAuthServer/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/alaminmain/DoorAuthServer --skill vulnerability-scanner-alaminmain

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps teams identify and prioritize security risks by scanning dependencies, secrets, code patterns, and configurations across projects.

Core Features & Use Cases

  • Automated risk detection: detects vulnerable dependencies, secret exposure, dangerous code patterns, and insecure configs.
  • OWASP-aligned coverage: maps findings to OWASP 2025 threat landscape and prioritizes remediation.
  • Use Case: run vulnerability-scanner on a repository to surface critical secrets and risky code patterns before release.

Quick Start

Run the vulnerability scanner against your project:

  • python scripts/security_scan.py /path/to/your/project --scan-type all
  • or ensure npm is installed and run from the project root.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and exposed secrets?▼

Static analysis detects vulnerable dependencies, exposed secrets, dangerous code patterns, and insecure configurations. It maps findings to the OWASP 2025 threat landscape to prioritize remediation based on severity, helping teams address critical security risks before release.

Can I run vulnerability scanning on Python and Go projects?▼

You can run vulnerability scanning in CI pipelines or local development by executing a Python script against your project path with a specified scan type. The scanner analyzes the codebase and outputs a structured JSON report summarizing security findings and remediation steps.

What is the best way to prioritize security risks found in dependencies?▼

The scanner requires Python to execute its security analysis script or npm installed in the project root. Running the script with a target project path and scan type parameter initiates the analysis, yielding a JSON report of prioritized security risks.

Does static analysis detect insecure configurations and dangerous code patterns?▼

The scanner outputs a structured JSON report summarizing security findings, severities, locations, and remediation steps. This format is suitable for integration into a broader security plan or for direct ingestion by CI pipeline automation tools.

Related Skills

Explore More Software Engineering Skills→
BaoNguyen09BaoNguyen09
6

install-mac

Install Node.js and project dependencies on macOS for development.

Community
Intermediate
ZateZate
9

audit-report

Generate structured security audit reports with findings, severity, and ASVS mappings.

Community
Advanced
D0NMEGAD0NMEGA
8

springboot-verification

Automate Spring Boot verification with build, static analysis, tests, and security scans.

Community
Advanced
erichowenserichowens
181

security-auditor

Identifies security vulnerabilities in codebases and dependencies across multiple languages.

Community
Advanced