vulnerability-scanner

Scan codebases for dependencies, secrets, code patterns, and misconfigurations.

Updated Aug 23, 2026

Search Tags:#code review #security #vulnerability #owasp #dependencies #secrets #scanning

Ready to run

npx skills add https://github.com/bennie-ng/AgCel --skill vulnerability-scanner-bennie-ng

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/bennie-ng/AgCel/tree/main/skills/vulnerability-scanner
Command: npx skills add https://github.com/bennie-ng/AgCel --skill vulnerability-scanner-bennie-ng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prioritize security vulnerabilities within a codebase, reducing the risk of breaches and ensuring compliance with security best practices.

Core Features & Use Cases

Dependency Auditing: Checks for known vulnerabilities in project dependencies (OWASP A03).
Secret Detection: Scans for hardcoded API keys, passwords, and other sensitive information (OWASP A04).
Code Pattern Analysis: Identifies dangerous coding patterns that could lead to injection, XSS, or other exploits (OWASP A05).
Configuration Review: Checks for common security misconfigurations in project settings.
Use Case: Before deploying a new feature, run this scanner to ensure no new secrets were accidentally committed and that the code doesn't introduce common vulnerabilities.

Quick Start

Run the security scan on the current project directory to identify any vulnerabilities.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for hardcoded secrets and security vulnerabilities?▼

To scan for hardcoded secrets and vulnerabilities, you can run a comprehensive security analysis on your project directory. This process uses regex-based pattern matching to identify exposed API keys and dangerous code patterns, providing actionable findings for remediation.

What is dependency auditing and how does it find known vulnerabilities?▼

Dependency auditing is the process of checking project libraries against databases of known security flaws. It utilizes tools like npm audit to identify supply chain vulnerabilities, targeting OWASP A03 issues to help you prioritize updates and reduce the risk of breaches.

Can I use this to check for dangerous code patterns and misconfigurations before deployment?▼

Yes, you can run a security scan before deploying a new feature to check for dangerous code patterns and common security misconfigurations. This ensures no new secrets were accidentally committed and verifies the code does not introduce common injection or XSS exploits.

Does the vulnerability scanner work without requiring additional security tools installed?▼

Yes, the scanner operates autonomously without requiring external dependencies. It leverages built-in scripts and regex-based pattern matching alongside standard audit commands to perform comprehensive security analysis of your codebase, dependencies, and configurations directly.

What is the best way to identify OWASP top 10 risks like injection and XSS in my project?▼

The best way to identify OWASP top 10 risks is through code pattern analysis that scans for dangerous coding conventions. This detects potential injection, XSS, and other exploits, while configuration reviews target misconfigurations to ensure compliance with security best practices.