vulnerability-scanner

Name: vulnerability-scanner
Availability: InStock
Author: andrejr82

Analyze vulnerabilities using OWASP 2025 and supply chain security principles.

Updated Feb 6, 2026

Search Tags:#security #vulnerability #owasp #threat modeling #risk assessment #supply chain

Ready to run

npx skills add https://github.com/Andrejr82/Caculinha_BI --skill vulnerability-scanner-andrejr82

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Andrejr82/Caculinha_BI/tree/main/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/Andrejr82/Caculinha_BI --skill vulnerability-scanner-andrejr82

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a project, moving beyond simple scans to a proactive, attacker-mindset approach for robust defense.

Core Features & Use Cases

Advanced Vulnerability Analysis: Covers OWASP Top 10 (2025), supply chain security, attack surface mapping, and risk prioritization.
Threat Modeling: Guides users through asking critical questions to understand potential threats before scanning.
Use Case: Before deploying a new microservice, use this Skill to analyze its codebase for common injection flaws, insecure configurations, and vulnerable dependencies, ensuring a secure release.

Quick Start

Use the vulnerability-scanner skill to perform a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a vulnerability analysis on my project before deployment?▼

Vulnerability analysis is performed by applying an attacker-mindset approach to identify and prioritize security risks. This skill guides you through threat modeling and executing scripts to validate security principles against your codebase.

What is threat modeling and when do I need it for security risk assessment?▼

Threat modeling is the process of asking critical questions to understand potential security threats before scanning. You need it to proactively map your attack surface and identify injection flaws or insecure configurations.

How do I check my project for OWASP Top 10 and supply chain vulnerabilities?▼

To check for OWASP 2025 and supply chain vulnerabilities, the skill maps your attack surface and prioritizes risks. It analyzes your codebase and dependencies to identify common flaws and vulnerable components.

Can I use this vulnerability scanner for a new microservice codebase?▼

Yes, you can use this vulnerability scanner for a new microservice. It analyzes the project directory for insecure configurations, injection flaws, and vulnerable dependencies to ensure a secure release.

What is the best way to prioritize security vulnerabilities found in my code?▼

The best way to prioritize vulnerabilities is through risk prioritization based on an attacker-mindset approach. This skill provides advanced principles to evaluate and mitigate identified security risks proactively.

Do I need any dependencies to run the automated security validation scripts?▼

No dependencies are required to run the automated security validation scripts. The skill operates independently to guide you through threat modeling and validate security principles within your current environment.