skills.rest
barbosakjn
barbosakjnCOMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scan codebases, dependencies, and configurations for security vulnerabilities with severity levels.

1|Updated Dec 28, 2025
Search Tags:#security#vulnerability#dependencies#secrets#risk-prioritization#code-scan
One-click install
npx skills add https://github.com/barbosakjn/finance-app --skill vulnerability-scanner-barbosakjn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/barbosakjn/finance-app/tree/main/.agent/workflows/.agent/skills/vulnerability-scanner
Command: npx skills add https://github.com/barbosakjn/finance-app --skill vulnerability-scanner-barbosakjn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This vulnerability scanner helps security and development teams identify and prioritize security issues in code, dependencies, and configurations to reduce risk and speed remediation.

Core Features & Use Cases

  • Dependency risk assessment across npm, Python, and other ecosystems to surface vulnerable packages and lockfile integrity concerns.
  • Secret and credential leakage detection within source code and configuration files to prevent exposure.
  • Code pattern and configuration checks aligned with OWASP Top 10:2025 to guide secure software delivery.
  • Actionable findings with severity levels to drive remediation and governance discussions.

Quick Start

Run python scripts/security_scan.py <project_path> to perform a full security assessment on the target project.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities and exposed secrets?▼

You can scan for security vulnerabilities and exposed secrets by running the scanner script against your project path to detect insecure patterns, dependency risks, and credential leakage, outputting structured findings with severity levels for remediation.

What is dependency risk assessment and how does it find vulnerable packages?▼

Dependency risk assessment is the process of evaluating package manifests and lockfiles across ecosystems like npm and Python to identify vulnerable dependencies and surface lockfile integrity concerns before deployment.

Can I use this vulnerability scanner to check configurations against OWASP Top 10?▼

Yes, you can use this vulnerability scanner to check configurations against OWASP Top 10:2025 guidelines by running code pattern and configuration reviews to guide secure software delivery and detect misconfigurations.

Does the security scanner work for CI pipelines and code reviews?▼

The security scanner works for CI pipelines and code reviews by applying dependency checks, secret pattern scans, and configuration reviews to your codebase, generating actionable findings with severity levels to drive remediation.

What is the best way to prioritize security vulnerabilities in my codebase?▼

The best way to prioritize security vulnerabilities in your codebase is to run a full security assessment that outputs structured findings with assigned severity levels, helping you reduce risk and speed remediation governance discussions.

Related Skills

Explore More Software Engineering Skills→
JaiminVadadoriyaJaiminVadadoriya
1

analyzing-dotnet-performance

Detect and classify performance anti-patterns in .NET source code.

Community
Advanced
dnvitidnviti
10

vulnerability-create

Generate structured remediation tasks from security vulnerability findings with severity classification.

Community
Intermediate
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
alex-voloshin-devalex-voloshin-dev
2

security-scan

Automate dependency vulnerability checks, secret detection, and OWASP compliance reviews.

Community
Advanced