vulnerability-scanner

Scan codebases and infrastructure for security vulnerabilities with Python scripts.

2|Updated Feb 6, 2026
One-click install
npx skills add https://github.com/bcastelino/agent-skills-kit --skill vulnerability-scanner-bcastelino
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/bcastelino/agent-skills-kit/tree/main/skills/vulnerability-scanner
Command: npx skills add https://github.com/bcastelino/agent-skills-kit --skill vulnerability-scanner-bcastelino

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities in code and infrastructure, ensuring compliance with modern security standards like OWASP 2025 and supply chain security best practices.

Core Features & Use Cases

  • Comprehensive Security Audits: Analyzes code for dangerous patterns, hardcoded secrets, and misconfigurations.
  • Supply Chain Security: Validates dependency integrity and checks for known vulnerabilities.
  • Risk Prioritization: Helps focus remediation efforts on the most critical issues based on CVSS, EPSS, and business context.
  • Use Case: Before deploying a new microservice, use this Skill to perform a full security scan, identify potential injection flaws and exposed API keys, and get a prioritized list of issues to fix.

Quick Start

Run a full security scan on the current project directory.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for hardcoded secrets and OWASP vulnerabilities?

Scanning codebases for hardcoded secrets and OWASP vulnerabilities involves running automated Python scripts that detect dangerous code patterns, validate configuration files, and identify exposed API keys to produce a prioritized security report.

What is supply chain security validation for project dependencies?

Supply chain security validation is the process of analyzing dependency integrity and identifying known vulnerabilities within project libraries to ensure compliance with modern security best practices.

How does risk prioritization work for security misconfigurations and code flaws?

Risk prioritization for security misconfigurations evaluates findings using CVSS, EPSS, and business context, helping you focus remediation efforts on the most critical injection flaws and dangerous patterns first.

Can I use automated security scanning for infrastructure configurations?

Yes, automated security scanning can analyze infrastructure configurations by validating configuration files to detect misconfigurations and insecure settings alongside standard codebase vulnerability checks.

Does this vulnerability scanner check compliance with the OWASP Top 10 2025?

Yes, the vulnerability scanner explicitly identifies risks and vulnerabilities related to the OWASP Top 10 2025 standards, ensuring your codebase aligns with modern compliance requirements.

What is the best way to secure code before deploying a new microservice?

The best way to secure code before deploying a new microservice is to perform a full security scan that identifies injection flaws, exposed secrets, and dependency risks, generating a prioritized remediation list.